CVEs-PoC/2007/CVE-2007-2157.md

CVE-2007-2157

Description

Directory traversal vulnerability in upload/force_download.php in Zomplog 3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

POC

Reference

• https://www.exploit-db.com/exploits/3764
• https://www.exploit-db.com/exploits/3764

Github

No PoCs found on GitHub currently.