• info
• discussion
• exploit
• solution
• references

GEBlog Index.PHP Local File Include Vulnerability

GeBlog is prone to a local file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to access sensitive information and to execute local script code in the context of the application; this may facilitate other attacks against the affected computer.

GeBlog 0.1 is vulnerable; other versions may also be affected.