Unrated severityNVD Advisory· Published Oct 18, 2007· Updated Jun 16, 2026

CVE-2007-5572

Description

Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Blog (SPHPBlog) 0.4.9 allow remote attackers to perform delete actions as administrators via (1) the block_id parameter to add_block.php or (2) the link_id parameter to add_link.php.

Affected products

Sphpblog/Sphpblog
cpe:2.3:a:sphpblog:sphpblog:0.4.9:*:*:*:*:*:*:*
Simple PHP Blog/SimplePHPBlogllm-create
Range: = 0.4.9
Simple PHP Blog/sphpBlogllm-fuzzy
Range: = 0.4.9

Patches

Vulnerability mechanics

References

hackish.altervista.org/forum/viewtopic.phpnvd
secunia.com/advisories/27264nvd
www.securityfocus.com/archive/1/482422/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/37238nvd
exchange.xforce.ibmcloud.com/vulnerabilities/37239nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000