CVE-2005-1169: Mafia Blog

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Mafia Blog .4 BETA does not properly protect the admin directory, which allows remote attackers to execute arbitrary PHP code by using writeinfo.php to inject the code into info.php.

Affected products

• Mafia Mafia Blog: version 4_beta only

Published 2005-05-02. Last modified 2026-06-16.