CVE-2014-125059

CVE-2014-125059 is a problematic file inclusion vulnerability affecting the blog_index function in main.c of sternenseemann's sternenblog, specifically versions prior to 0.1.0. This critical vulnerability (CVSS 9.8) allows remote attackers to manipulate the post_path argument, potentially leading to arbitrary file inclusion with high impact on confidentiality, integrity, and availability. Despite its high severity, the attack complexity is high, exploitation is considered difficult, and the vendor notes it as theoretical, likely only occurring on obscure web servers. There is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or KEV entry, though it has garnered significant community discussion with 10 mentions.