Lucene search
K

4 matches found

RedhatCVE
RedhatCVE
added 2025/12/16 8:44 p.m.7 views

CVE-2023-53888

Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload malicious JavaScript files, rename them to PHP, and execute system commands by exploiting the saveE and...

8.8CVSS8.5AI score0.00824EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2025/12/15 8:28 p.m.6 views

CVE-2023-53888

Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulation endpoints. Attackers can upload files such as JavaScript and rename them to .php via the saveE and rename actions, then execute the...

8.8CVSS6.5AI score0.00824EPSS
Exploits1References3Affected Software1
CNNVD
CNNVD
added 2025/12/15 12:0 a.m.2 views

Zomplog 安全漏洞

Zomplog is a web logging system from Zomplog Open Source. A security vulnerability exists in Zomplog version 3.9 that originates from allowing an authenticated user to inject malicious script when creating a new page, which could lead to a cross-site scripting attack...

5.4CVSS5.9AI score0.00205EPSS
Exploits1References5
0day.today
0day.today
added 2007/05/20 12:0 a.m.16 views

Zomplog <= 3.8 (mp3playlist.php speler) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== Zomplog connect to website" try: source = urllib2.urlopen...

7.1AI score
Exploits0
Rows per page
Query Builder