CVE-2007-2773

SQL injection vulnerability in plugins/mp3playlist/mp3playlist.php in Zomplog 3.8 and earlier allows remote attackers to execute arbitrary SQL commands via the speler parameter...

CVE-2007-2773

CVE-2007-2773 affects Zomplog 3.8 and earlier via plugins/mp3playlist/mp3playlist.php. The speler parameter is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. No remediation details are provided in the given documents.

Zomplog <= 3.8 (mp3playlist.php speler) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x...

zomplog-sql.txt

!/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x ----------------------------------------------------------------------------------...

Zomplog <= 3.8 (mp3playlist.php speler) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== Zomplog connect to website" try: source = urllib2.urlopen...

Zomplog 3.8 - mp3playlist.php SQL Injection

Zomplog 3.8 - mp3playlist.php SQL Injection !/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x...

Zomplog 3.8 - 'mp3playlist.php' SQL Injection

!/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x ----------------------------------------------------------------------------------...

Directory traversal

Directory traversal vulnerability in upload/forcedownload.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2157

Directory traversal vulnerability in upload/forcedownload.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2157

Directory traversal vulnerability in upload/forcedownload.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2157

CVE-2007-2157 describes a directory traversal vulnerability in the Zomplog 3.8 application, specifically in upload/force_download.php. An attacker can use a dot-dot (..) sequence in the file parameter to read arbitrary files. The NVD entry confirms the issue and lists a high impact potential for ...

Zomplog 3.8 &#40;force_download.php file&#41; Remote File Disclosure Vuln

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + + -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

Zomplog 3.8 (force_download.php file) Remote File Disclosure Vuln

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + &nbsp...

Zomplog 3.8 - force_download.php Remote File Disclosure

Zomplog 3.8 - forcedownload.php Remote File Disclosure -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + +...

Zomplog 3.8 - 'force_download.php' Remote File Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + + -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

Zomplog 3.8 (force_download.php file) Remote File Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================= Zomplog 3.8 forcedownload.php file Remote File Disclosure Vuln =================================================================...

Directory traversal

Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the settingsskin parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via...

CVE-2007-1524

Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the settingsskin parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via...

CVE-2007-1524

Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the settingsskin parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via...

CVE-2007-1524

CVE-2007-1524 affects ZomPlog up to version 3.7.6, specifically the themes/default/ handling. The vulnerability is a directory traversal flaw where an attacker can use the settings[skin] parameter to include local files; by injecting PHP code into an Apache log file, that code can be included via...