• info
• discussion
• exploit
• solution
• references

LightBlog Main.PHP Arbitrary File Upload Vulnerability

LightBlog is prone to a vulnerability that allows attackers to upload arbitrary files. The issue occurs because the application fails to sufficiently sanitize user-supplied input.

Attackers can exploit this vulnerability to upload PHP script code and execute it in the context of the webserver process.

LightBlog 6.8 is vulnerable; other versions may also be affected.