VULNERABILITY INTELLIGENCE

CVE-2007-5231

CVSS score4.6 MEDIUM
EPSS probability1.94%
CISA KEVNot currently listed
Published2007-10-05
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:S/C:P/I:P/A:P

Description

Unrestricted file upload vulnerability in admin/upload_files.php in Zomplog 3.8.1 and earlier allows remote authenticated administrators to upload and execute arbitrary .php files by sending a modified MIME type. NOTE: this can be exploited by unauthenticated attackers by leveraging CVE-2007-5230.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references