{"uuid": "cc3effb9-351c-444d-8953-1b320cb462ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2005-2733", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/sphpblog_file_upload.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Matteo Cantoni \", \"aushack \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module combines three separate issues within The Simple PHP Blog (<= 0.4.0)\\n          application to upload arbitrary data and thus execute a shell. The first\\n          vulnerability exposes the hash file (password.txt) to unauthenticated users.\\n          The second vulnerability lies within the image upload system provided to\\n          logged-in users; there is no image validation function in the blogger to\\n          prevent an authenticated user from uploading any file type. The third\\n          vulnerability occurs within the blog comment functionality, allowing\\n          arbitrary files to be deleted.\", \"disclosure_date\": \"2005-08-25\", \"fullname\": \"exploit/unix/webapp/sphpblog_file_upload\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Simple PHP Blog Remote Command Execution\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/sphpblog_file_upload.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/sphpblog_file_upload\", \"references\": [\"CVE-2005-2733\", \"OSVDB-19012\", \"BID-14667\", \"EDB-1191\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:47.472590Z"}