Directory Traversal Vulnerability in Zomplog 3.8
CVE-2007-2157

Currently unrated

Key Information:

Vendor

Zomplog

Status
Zomplog
Vendor
CVE Published:
19 April 2007

What is CVE-2007-2157?

A directory traversal vulnerability exists in Zomplog 3.8 that allows remote attackers to exploit the upload/force_download.php script. By manipulating the file parameter, attackers can traverse the directory structure using '../' sequences, enabling them to read arbitrary files on the server. This can lead to unauthorized access to sensitive information and potential further exploitation.

References

http://www.vupen.com/english/advisories/2007/1449
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/33740
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/3764
exploitx_refsource_EXPLOIT-DB

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2007-2157 : Directory Traversal Vulnerability in Zomplog 3.8