NVD

Id
57789  
Name
CVE-2007-5732  
Description
Directory traversal vulnerability in downloadfile.php in eLouai"s Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter. NOTE: this issue only occurs in environments where the system administrator has not followed the vendor recommendations that this product should only be used internally.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-10-30  
Modified Date
2008-11-15  
Seq
2007-5732  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
295738 57789 CVE-2007-5732 http://elouai.com/force-download.php  View
295739 57789 CVE-2007-5732 3321  View
295740 57789 CVE-2007-5732 20071023 [Vulz] eLouai"s Download Script Remote File Download Vulnerability  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
54148 JVNDB-2007-002840 メディアファイルスクリプトの eLouai"s Force Download におけるディレクトリトラバーサルの脆弱性 メディアファイルスクリプトの eLouai"s Force Download の downloadfile.php には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2007-5732 29087 CVE-2007-5732 57789 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-002840.html 2007-10-30 2012-06-26 View