Lucene search

[email protected]NVD:CVE-2007-5732

HistoryOct 30, 2007 - 11:46 p.m.

CVE-2007-5732

2007-10-3023:46:00

CWE-22

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

70.7%

JSON

Directory traversal vulnerability in downloadfile.php in eLouai’s Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter. NOTE: this issue only occurs in environments where the system administrator has not followed the vendor recommendations that this product should only be used internally.

Affected configurations

Nvd

Node

elouaiforce_download

VendorProductVersionCPE
elouaiforce_download*cpe:2.3:a:elouai:force_download:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
elouai	force_download	*	cpe:2.3:a:elouai:force_download::::::::

References

elouai.com/force-download.php

osvdb.org/39011

securityreason.com/securityalert/3321

www.securityfocus.com/archive/1/482679/100/0/threaded

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.003

Percentile

70.7%

JSON

Related for NVD:CVE-2007-5732

cvelist1 cve1 prion1