high7.5Public exploit code
CVE-2007-5230
admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative acti…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Zomplog 3.8.1 - Arbitrary File Upload2007-09-28 · webapps · php · Verified
Impact
admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative actions via a direct request. NOTE: this can be leveraged for code execution by exploiting CVE-2007-5231.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zomplog | Zomplog | Versions 3.7, 3.7.6, 3.8, 3.8.1 |