Vulnerabilities > Zomp
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2008-05-20 | CVE-2008-2349 | Permissions, Privileges, and Access Controls vulnerability in Zomp Zomplog Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with the admin parameter set to 1. | 7.5 |
| 2008-05-13 | CVE-2008-2176 | Cross-Site Scripting vulnerability in Zomp Zomplog 3.8.2 Cross-site scripting (XSS) vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname parameter. | 4.3 |