Sploitus

11 exploited vulnerabilities in Zomplog

Vulnerabilities with publicly known exploits

Vendors
Zomplog, Apache
With known exploits
11
Affected Zomp Zomplog versions
= 3.9, 3.8.2
Affected Zomplog versions
= 3.8, 3.7, 3.7.6, 3.8.1, 3.4, 3.3

Vulnerabilities with exploits

Highest CVSS first — 8 of these already have exploit code on Sploitus

CVE-2023-53888
CVSS 8.8 HIGH 2025-12-15
CVE-2007-2157 1 exploit
CVSS 7.8 HIGH 2007-04-19FIX AVAILABLE
Zomplog 3.8 - 'force_download.php' Remote File Disclosure
CVE-2008-2349 1 exploit
CVSS 7.5 HIGH 2008-05-20FIX AVAILABLE
Zomplog 3.8.2 - 'newuser.php' Arbitrary Add Admin
CVE-2007-5230 1 exploit
CVSS 7.5 HIGH 2007-10-05FIX AVAILABLE
Zomplog 3.8.1 - Arbitrary File Upload
CVE-2007-2773 1 exploit
CVSS 7.5 HIGH 2007-05-21FIX AVAILABLE
Zomplog 3.8 - 'mp3playlist.php' SQL Injection
CVE-2005-3309
CVSS 7.5 HIGH 2005-10-25FIX AVAILABLE
CVE-2023-53887
CVSS 5.4 MEDIUM 2025-12-15FIX AVAILABLE
CVE-2007-1524 1 exploit
CVSS 5.0 MEDIUM 2007-03-20
Zomplog 3.7.6 (Windows x86) - Local File Inclusion
CVE-2007-5231 1 exploit
CVSS 4.6 MEDIUM 2007-10-05FIX AVAILABLE
Zomplog 3.8.1 - Arbitrary File Upload
CVE-2007-5278 1 exploit
CVSS 4.3 MEDIUM 2007-10-08FIX AVAILABLE
Zomplog 3.8.1 - Arbitrary File Upload
CVE-2005-3308 1 exploit
CVSS 4.3 MEDIUM 2005-10-25FIX AVAILABLE
Zomplog 3.3/3.4 - 'detail.php' HTML Injection