CVE-2007-5231

CVE-2007-5231 affects Zomplog prior to 3.8.1: an unrestricted file upload in admin/upload_files.php allows remote authenticated administrators to upload and execute arbitrary PHP files by sending a modified MIME type. Note that CVE-2007-5230 shows this can be leveraged for code execution and coul...

CVE-2007-5230

CVE-2007-5230 concerns Zomplog 3.8.1 and earlier where admin/upload_files.php does not require administrative credentials, enabling remote attackers to perform administrative actions via a direct request. This is linked to CVE-2007-5231, which describes an unrestricted file upload vulnerability i...