CVE-2007-5230: High severity Zomplog Zomplog vulnerability

Published Oct 5, 2007

Updated

admin/uploadfiles.php in Zomplog 3.8.1 and earlier does not check for administrative credentials, which allows remote attackers to perform administrative actions via a direct request. NOTE: this can be leveraged for code execution by exploiting CVE-2007-5231.

Affected Software

4 affected components

Zomplog Zomplog=3.8.1

Zomplog Zomplog=3.8

Zomplog Zomplog=3.7.6

Zomplog Zomplog=3.7

Remediation

Patch Available

http://www.securityfocus.com/bid/25861

Event History

Oct 5, 2007

CVE Published

11:17 PM

Oct 6, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5230?

CVE-2007-5230 is rated as critical due to its potential to allow remote administrative access without authentication.

How do I fix CVE-2007-5230?

To address CVE-2007-5230, upgrade Zomplog to version 3.8.2 or later, which includes proper authentication checks.

Which versions of Zomplog are affected by CVE-2007-5230?

CVE-2007-5230 affects Zomplog versions 3.8.1, 3.8, 3.7.6, and 3.7.

Can CVE-2007-5230 lead to code execution?

Yes, CVE-2007-5230 can be leveraged for code execution by exploiting CVE-2007-5231.

What actions can an attacker perform due to CVE-2007-5230?

An attacker can perform administrative actions on a vulnerable Zomplog installation without needing valid credentials.