FKIE_CVE-2007-5072

Vulnerability from fkie_nvd - Published: 2007-09-24 23:17 - Updated: 2026-06-16 22:45
Severity
Summary
Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via certain user_colors array parameters to certain user_style.php files under themes/, as demonstrated by the user_colors[bg_color] parameter.
References
cve@mitre.orghttp://secunia.com/advisories/26968
cve@mitre.orghttp://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txt
cve@mitre.orghttp://www.securityfocus.com/archive/1/480569/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/25802
cve@mitre.orghttp://www.simplephpblog.com/comments.php?y=07&m=09&entry=entry070923-004446
cve@mitre.orghttp://www.simplephpblog.com/index.php?m=09&y=07
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/36783
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/26968
af854a3a-2127-422b-91ae-364da2661108http://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txt
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/480569/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/25802
af854a3a-2127-422b-91ae-364da2661108http://www.simplephpblog.com/comments.php?y=07&m=09&entry=entry070923-004446
af854a3a-2127-422b-91ae-364da2661108http://www.simplephpblog.com/index.php?m=09&y=07
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/36783
Impacted products
Vendor Product Version
alexander_palmo simple_php_blog *
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:alexander_palmo:simple_php_blog:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "237B3BD1-0D05-42ED-AAB5-84C9286F1596",
              "versionEndIncluding": "0.5.0.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple cross-site scripting (XSS) vulnerabilities in Simple PHP Blog (SPHPBlog) before 0.5.1, when register_globals is enabled, allow remote attackers to inject arbitrary web script or HTML via certain user_colors array parameters to certain user_style.php files under themes/, as demonstrated by the user_colors[bg_color] parameter."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de lista negra incompleta en el archivo upload_img_cgi.php en Simple PHPBlog versiones anteriores a 0.5.1, permite a atacantes remotos cargar archivos peligrosos y ejecutar c\u00f3digo arbitrario, como es demostrado por un nombre de archivo que termina en .php. o un archivo .htaccess, un vector diferente de CVE-2005-2733. NOTA: esta vulnerabilidad tambi\u00e9n estaba presente en una versi\u00f3n 0.5.1 descargada disponible temprano en la ma\u00f1ana del 20070923. NOTA: la divulgaci\u00f3n original del 20070920 proporcionaba un nombre de archivo incorrecto, img_upload_cgi.php."
    }
  ],
  "id": "CVE-2007-5072",
  "lastModified": "2026-06-16T22:45:23.820",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2007-09-24T23:17:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/26968"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/480569/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/25802"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.simplephpblog.com/comments.php?y=07\u0026m=09\u0026entry=entry070923-004446"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.simplephpblog.com/index.php?m=09\u0026y=07"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36783"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/26968"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securenetwork.it/ricerca/advisory/download/SN-2007-03.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/480569/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/25802"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.simplephpblog.com/comments.php?y=07\u0026m=09\u0026entry=entry070923-004446"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.simplephpblog.com/index.php?m=09\u0026y=07"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36783"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.