← Database

CVE-2007-5230

HIGH CVSS: 7.5 Published: 2007-10-05 Modified: 2026-06-16

Description

admin/upload_files.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative actions via a direct request. NOTE: this can be leveraged for code execution by exploiting CVE-2007-5231.

Affected Platforms

Zomplog Zomplog

Weakness Type

CWE-264

References