Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SimplePHPBlog 0.4.0 stores password hashes in config/password.txt with insufficient access control, which allows remote attackers to obtain passwords via a brute force attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SimplePHPBlog 口令文件 信息泄露漏洞
Vulnerability Description
Simple PHP Blog是一款基于PHP的BLOG程序。 Simple PHP Blog 0.4.0中存在信息泄露漏洞。 由于Simple PHP Blog将用户口令的hash文件保存在config/password.txt，缺乏必要的访问控制，远程攻击者可通过HTTP请求远程直接获取该文件，通过暴力破解，可能造成敏感信息泄露。
CVSS Information
N/A
Vulnerability Type
N/A