Vulnerability in Mafia Blog

CVE-2005-1169

Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php.

EPSS: 0.015 (72.2th percentile) — read the EPSS interpretation.

Affected products

Mafia Mafia_blog — versions 4_beta
N/a — versions n/a

References

cve@mitre.org (x_refsource_CONFIRM)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID)