Approved changes feed: RSS · Atom
cpe:2.3:a:zomplog:zomplog:3.7.6:*:*:*:*:*:*:*part: a version: 3.7.6 update: *
| Vendor | Zomplog (76f91ec6-06c8-5b75-a895-f9b5a39e9002) |
|---|---|
| Product | Zomplog (ad8282e1-22f4-5787-9a09-bdf121a2d3fd) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-5231 |
vulnerable | 2026-06-08 04:50:04.622900 |
Details available
Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2007-5230.
Published: 2007-10-05T23:00:00.000Z
Updated: 2024-08-07T15:24:42.082Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5230 |
vulnerable | 2026-06-08 04:50:04.621423 |
Details available
admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative actions via a direct request. NOTE: this can be leveraged for code execution by exploiting CVE-2007-5231.
Published: 2007-10-05T23:00:00.000Z
Updated: 2024-08-07T15:24:42.094Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1524 |
vulnerable | 2026-06-08 04:49:42.801751 |
Details available
Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. (dot dot) in the settings[skin] parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via themes/default/.
Published: 2007-03-20T20:00:00.000Z
Updated: 2024-08-07T12:59:08.428Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.