Description
Simple PHP Blog中的upload_img_cgi.php存在不完全黑名单漏洞，远程攻击者可以上载危险文件和执行任意代码,例如一个以.htaccess或.php结尾的文件。
SimplePHPBlog img_upload_cgi.php 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2007-5071
https://www.exploit-db.com/exploits/16883
https://www.rapid7.com/db/modules/exploit/unix/webapp/sphpblog_file_upload/
https://vulners.com/securityvulns/SECURITYVULNS:DOC:18038
https://www.ptt.cc/bbs/Bugtraq/M.1190303928.A.html
https://github.com/Asim-QAZi/RCE-Simplephpblog-biggiedroid
https://cve.akaoma.com/cve-2007-5071
https://www.ikkisoft.com/stuff/SN-2007-03.txt
https://www.cisa.gov/news-events/bulletins/sb07-274