Vulnerabilities > CVE-2007-2157 - Directory Traversal vulnerability in Zomplog 3.8

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
zomplog
exploit available
NVD
Published: 2007-04-19
Updated: 2017-10-11

Summary

Directory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

Vulnerable Configurations

Part Description Count
Application
Zomplog
1

Exploit-Db

descriptionZomplog 3.8 (force_download.php file) Remote File Disclosure Vuln. CVE-2007-2157. Webapps exploit for php platform
fileexploits/php/webapps/3764.txt
idEDB-ID:3764
last seen2016-01-31
modified2007-04-18
platformphp
port
published2007-04-18
reporterDj7xpl
sourcehttps://www.exploit-db.com/download/3764/
titleZomplog 3.8 force_download.php file Remote File Disclosure Vuln
typewebapps

References