Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2007-5231

Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2007-5230.

  • Published: Oct 6, 2007
  • Updated: Apr 13, 2023
  • CVE: CVE-2007-5231
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.6
  • AV:N/AC:H/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
zomplog / zomplog 3.8.1 3.8.1.x
zomplog / zomplog 3.8 3.8.x
zomplog / zomplog 3.7.6 3.7.6.x
zomplog / zomplog 3.7 3.7.x