Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Zomplog admin/upload_files.php Unauthorized Access Vulnerability

Zomplog is prone to an unauthorized-access vulnerability because it fails to adequately limit access to administrative scripts.

An attacker can exploit this vulnerability to upload arbitrary code and execute it in the context of the webserver process. This may allow the attacker to gain unauthorized access or to escalate privileges; other attacks are also possible.

This issue affects Zomplog 3.8.1; other versions may also be vulnerable.







 

Privacy Statement
Copyright 2009, SecurityFocus