Lucene search
+L

2 matches found

NVD
NVD
added 2007/04/19 10:19 a.m.17 views

CVE-2007-2157

Directory traversal vulnerability in upload/forcedownload.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

7.8CVSS6.6AI score0.03511EPSS
SaveExploits1References6
CVE
CVE
added 2007/04/19 10:0 a.m.56 views

CVE-2007-2157

CVE-2007-2157 describes a directory traversal vulnerability in the Zomplog 3.8 application, specifically in upload/force_download.php. An attacker can use a dot-dot (..) sequence in the file parameter to read arbitrary files. The NVD entry confirms the issue and lists a high impact potential for ...

7.8CVSS6.7AI score0.03511EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder