← Database

CVE-2007-5231

MEDIUM CVSS: 4.6 Published: 2007-10-05 Modified: 2026-06-16

Description

Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2007-5230.

Affected Platforms

Zomplog Zomplog

Weakness Type

CWE-20

References