Lucene search
HistoryFeb 01, 2007 - 10:28 p.m.
CVE-2007-0659
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.02
Percentile
89.0%
download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.
Affected configurations
Node
modxcmsfiledownloadMatch1.7
ORmodxcmsfiledownloadMatch2.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| modxcms | filedownload | 1.7 | cpe:2.3:a:modxcms:filedownload:1.7:*:*:*:*:*:*:* |
| modxcms | filedownload | 2.0 | cpe:2.3:a:modxcms:filedownload:2.0:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2007-02-01 22:28:00
cve
cve
CVE-2007-0659
2007-02-01 22:28:00
cvelist
cvelist
CVE-2007-0659
2007-02-01 22:00:00
securityvulns
securityvulns
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.8
Confidence
Low
EPSS
0.02
Percentile
89.0%
Related for NVD:CVE-2007-0659