CVE-2007-2773

CVE-2007-2773 affects Zomplog 3.8 and earlier via plugins/mp3playlist/mp3playlist.php. The speler parameter is vulnerable to SQL injection, allowing remote attackers to execute arbitrary SQL commands. No remediation details are provided in the given documents.

CVE-2007-2773

SQL injection vulnerability in plugins/mp3playlist/mp3playlist.php in Zomplog 3.8 and earlier allows remote attackers to execute arbitrary SQL commands via the speler parameter...

zomplog-sql.txt

!/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x ----------------------------------------------------------------------------------...

Zomplog <= 3.8 (mp3playlist.php speler) Remote SQL Injection Exploit

No description provided by source. !/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x...

Zomplog 3.8 - mp3playlist.php SQL Injection

Zomplog 3.8 - mp3playlist.php SQL Injection !/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x...

Zomplog <= 3.8 (mp3playlist.php speler) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ==================================================================== Zomplog connect to website" try: source = urllib2.urlopen...

Zomplog 3.8 - 'mp3playlist.php' SQL Injection

!/usr/bin/python ---------------------------------------------------------------------------------- The sql injection : /zomplog-3.8/plugins/mp3playlist/mp3playlist.php?speler=sql I've code a sploit for the fun x ----------------------------------------------------------------------------------...

Directory traversal

Directory traversal vulnerability in upload/forcedownload.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2157

Directory traversal vulnerability in upload/forcedownload.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2157

Directory traversal vulnerability in upload/forcedownload.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. dot dot in the file parameter...

CVE-2007-2157

CVE-2007-2157 describes a directory traversal vulnerability in the Zomplog 3.8 application, specifically in upload/force_download.php. An attacker can use a dot-dot (..) sequence in the file parameter to read arbitrary files. The NVD entry confirms the issue and lists a high impact potential for ...

Zomplog 3.8 &#40;force_download.php file&#41; Remote File Disclosure Vuln

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + + -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

Zomplog 3.8 (force_download.php file) Remote File Disclosure Vuln

No description provided by source. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + &nbsp...

Zomplog 3.8 (force_download.php file) Remote File Disclosure Vuln

Exploit for unknown platform in category web applications ================================================================= Zomplog 3.8 forcedownload.php file Remote File Disclosure Vuln =================================================================...

Zomplog 3.8 - force_download.php Remote File Disclosure

Zomplog 3.8 - forcedownload.php Remote File Disclosure -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + +...

Zomplog 3.8 - 'force_download.php' Remote File Disclosure

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- + + + Y! Underground Group + + + -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-...

CVE-2007-1524

Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the settingsskin parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via...

Directory traversal

Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the settingsskin parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via...

CVE-2007-1524

Directory traversal vulnerability in themes/default/ in ZomPlog 3.7.6 and earlier allows remote attackers to include arbitrary local files via a .. dot dot in the settingsskin parameter, as demonstrated by injecting PHP code into an Apache HTTP Server log file, which can then be included via...

CVE-2007-1524

CVE-2007-1524 affects ZomPlog up to version 3.7.6, specifically the themes/default/ handling. The vulnerability is a directory traversal flaw where an attacker can use the settings[skin] parameter to include local files; by injecting PHP code into an Apache log file, that code can be included via...