CVE-2007-5732 | BDVDB-2026-27504 Detail

Description#

Directory traversal vulnerability in downloadfile.php in eLouai's Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter. NOTE: this issue only occurs in environments where the system administrator has not followed the vendor recommendations that this product should only be used internally.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/39011
http://elouai.com/force-download.php
http://securityreason.com/securityalert/3321
http://www.securityfocus.com/archive/1/482679/100/0/threaded

Exploit#

No public exploit known

History#

Version 12007-10-30Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.