Zomp Zomplog
4 CVEs affecting Zomp Zomplog. Latest disclosed: 2025-12-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-53888 | High | 8.8 | 2025-12-15 | Zomplog 3.9 contains a remote code execution vulnerability that allows authenticated attackers to inject and execute arbitrary PHP code through file manipulati… |
CVE-2023-53887 | Medium | 5.4 | 2025-12-15 | Zomplog 3.9 contains a cross-site scripting vulnerability that allows authenticated users to inject malicious scripts when creating new pages. Attackers can cr… |
CVE-2008-2349 | | 2008-05-20 | Zomplog 3.8.2 and earlier allows remote attackers to gain administrative access by creating an admin account via a direct request to install/newuser.php with t… | |
CVE-2008-2176 | | 2008-05-13 | Cross-site scripting (XSS) vulnerability in admin/category.php in Zomplog 3.8.2 allows remote attackers to inject arbitrary web script or HTML via the catname… |