CVE-2007-5732 in Force Downloadinfo

Summary

Directory traversal vulnerability in downloadfile.php in eLouai s Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter. NOTE: this issue only occurs in environments where the system administrator has not followed the vendor recommendations that this product should only be used internally.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

10/30/2007

Disclosure

10/30/2007

CPE

ready

CVSS

5.3

EPSS

0.00095

Activities

Very Low

Sources

Want to stay up to date on a daily basis?

Enable the mail alert feature now!