CVE-2009-2552: Supersimple Super Simple Blog Script

Medium severity, CVSS 6.8. EPSS: 2% chance of exploitation in the next 30 days.

Multiple directory traversal vulnerabilities in comments.php in Super Simple Blog Script 2.5.4 allow remote attackers to overwrite, include, and execute arbitrary local files via the entry parameter.

Affected products

• Supersimple Super Simple Blog Script: version 2.5.4 only

Published 2009-07-20. Last modified 2026-06-16.