EUVD-2007-2765

Malware in sbrugna...

CVE-2007-2773

CVE-2007-2773 affects Zomplog 3.8 and earlier via plugins/mp3playlist/mp3playlist.php. The speler parameter is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. No remediation details are provided in the given documents.

Directory traversal

Directory traversal vulnerability in upload/forcedownload.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2157

Directory traversal vulnerability in upload/forcedownload.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...