Approved changes feed: RSS · Atom

cpe:2.3:a:zomplog:zomplog:3.8:*:*:*:*:*:*:*

part: a version: 3.8 update: *

VendorZomplog (76f91ec6-06c8-5b75-a895-f9b5a39e9002)
ProductZomplog (ad8282e1-22f4-5787-9a09-bdf121a2d3fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-5231 vulnerable 2026-06-08 04:50:04.622921 Details available
Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2007-5230.
Published: 2007-10-05T23:00:00.000Z
Updated: 2024-08-07T15:24:42.082Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-5230 vulnerable 2026-06-08 04:50:04.621950 Details available
admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative actions via a direct request. NOTE: this can be leveraged for code execution by exploiting CVE-2007-5231.
Published: 2007-10-05T23:00:00.000Z
Updated: 2024-08-07T15:24:42.094Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2157 vulnerable 2026-06-08 04:49:44.233219 Details available
Directory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Published: 2007-04-19T10:00:00.000Z
Updated: 2024-08-07T13:23:51.013Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.