CVE-2005-1169 - Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php

Back Back to CVE browser

HIGH

Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php

Published Apr 18, 2005

7.5

HIGH

CVSS 2.0

EPSS 1.53%

Description

Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

http://chrisnowak.org/projects/mafia/
x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=111359511826958&w=2
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/13194
vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1172
Advisory

Link	Providers	Tags
http://chrisnowak.org/projects/mafia/		x_refsource_CONFIRM
http://marc.info/?l=bugtraq&m=111359511826958&w=2		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/13194		vdb-entryx_refsource_BID
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1172		Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 18, 2005

Updated Aug 7, 2024

Reserved Apr 18, 2005

Link CVE-2005-1169

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2005-1169

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Apr 18, 2005

Updated Aug 7, 2024

Link EUVD-2005-1172

GitHub

No data