{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-10-23T00:00:00", "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in downloadfile.php in eLouai's Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter. NOTE: this issue only occurs in environments where the system administrator has not followed the vendor recommendations that this product should only be used internally."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "39011", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/39011"}, {"tags": ["x_refsource_MISC"], "url": "http://elouai.com/force-download.php"}, {"name": "3321", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3321"}, {"name": "20071023 [Vulz] eLouai's Download Script Remote File Download Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/482679/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-5732", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Directory traversal vulnerability in downloadfile.php in eLouai's Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter. NOTE: this issue only occurs in environments where the system administrator has not followed the vendor recommendations that this product should only be used internally."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "39011", "refsource": "OSVDB", "url": "http://osvdb.org/39011"}, {"name": "http://elouai.com/force-download.php", "refsource": "MISC", "url": "http://elouai.com/force-download.php"}, {"name": "3321", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3321"}, {"name": "20071023 [Vulz] eLouai's Download Script Remote File Download Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/482679/100/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:39:13.723Z"}, "title": "CVE Program Container", "references": [{"name": "39011", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/39011"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://elouai.com/force-download.php"}, {"name": "3321", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/3321"}, {"name": "20071023 [Vulz] eLouai's Download Script Remote File Download Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/482679/100/0/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5732", "datePublished": "2007-10-30T23:00:00", "dateReserved": "2007-10-30T00:00:00", "dateUpdated": "2024-08-07T15:39:13.723Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:elouai:force_download:*:*:*:*:*:*:*:*", "matchCriteriaId": "0A00A5A2-6B5F-4338-82BD-A61B6CD2A647", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in downloadfile.php in eLouai's Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter. NOTE: this issue only occurs in environments where the system administrator has not followed the vendor recommendations that this product should only be used internally."}, {"lang": "es", "value": "Vulnerabilidad de salto de directorio en downloadfile.php en eLouai's Force Download de secuencias de comandos en archivos media, como los disponible en 20071030 y anteriores, permite a atacantes remotos leer archivos de su elecci\u00f3n a trav\u00e9s del par\u00e1metro file. NOTA: este asunto solo ocurre en entornos donde el administrador del sistema que no ha seguido las recomendaciones del vendedor que este producto s\u00f3lo debe utilizarse internamente."}], "id": "CVE-2007-5732", "lastModified": "2018-10-15T21:46:10.190", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-10-30T23:46:00.000", "references": [{"source": "cve@mitre.org", "url": "http://elouai.com/force-download.php"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/39011"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/3321"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/482679/100/0/threaded"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}