VYPR
← All advisories
Unrated severityNVD Advisory· Published Oct 5, 2007· Updated Apr 23, 2026

CVE-2007-5230

CVE-2007-5230

Description

admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative actions via a direct request. NOTE: this can be leveraged for code execution by exploiting CVE-2007-5231.

Affected products

4
  • Zomplog/Zomplog4 versions
    cpe:2.3:a:zomplog:zomplog:3.7:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:zomplog:zomplog:3.7:*:*:*:*:*:*:*
    • cpe:2.3:a:zomplog:zomplog:3.7.6:*:*:*:*:*:*:*
    • cpe:2.3:a:zomplog:zomplog:3.8:*:*:*:*:*:*:*
    • cpe:2.3:a:zomplog:zomplog:3.8.1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.