{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-01-26T00:00:00", "descriptions": [{"lang": "en", "value": "download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-16T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "23947", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23947"}, {"name": "20070126 FdScript <= v1.3.2 Remote File Disclosure Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/458231/100/0/threaded"}, {"name": "33001", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/33001"}, {"name": "2197", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/2197"}, {"name": "ADV-2007-0383", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0383"}, {"name": "22265", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22265"}, {"name": "fdscript-download-file-disclosure(31915)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31915"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-0620", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "23947", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23947"}, {"name": "20070126 FdScript <= v1.3.2 Remote File Disclosure Vulnerability", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/458231/100/0/threaded"}, {"name": "33001", "refsource": "OSVDB", "url": "http://osvdb.org/33001"}, {"name": "2197", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/2197"}, {"name": "ADV-2007-0383", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0383"}, {"name": "22265", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22265"}, {"name": "fdscript-download-file-disclosure(31915)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31915"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:26:54.370Z"}, "title": "CVE Program Container", "references": [{"name": "23947", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23947"}, {"name": "20070126 FdScript <= v1.3.2 Remote File Disclosure Vulnerability", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/458231/100/0/threaded"}, {"name": "33001", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/33001"}, {"name": "2197", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/2197"}, {"name": "ADV-2007-0383", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0383"}, {"name": "22265", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/22265"}, {"name": "fdscript-download-file-disclosure(31915)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31915"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-0620", "datePublished": "2007-01-31T11:00:00", "dateReserved": "2007-01-30T00:00:00", "dateUpdated": "2024-08-07T12:26:54.370Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:vlad_leont:fd_script:1.3:*:*:*:*:*:*:*", "matchCriteriaId": "8D6CB914-8A20-4570-A98B-140C565D3AF2", "vulnerable": true}, {"criteria": "cpe:2.3:a:vlad_leont:fd_script:1.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "82FC5F40-F8BA-4921-AA05-9824FC42BEF3", "vulnerable": true}, {"criteria": "cpe:2.3:a:vlad_leont:fd_script:1.3.2:*:*:*:*:*:*:*", "matchCriteriaId": "5EF4A635-D3F2-4552-A4D8-A22D82C2F828", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php."}, {"lang": "es", "value": "download.php en el FD Script 1.3.2 y versiones anteriores permite a atacantes remotos leer ficheros fuente bajo el ra\u00edz de los documentos web con ciertas extensiones, inluyendo .php, mediante una ruta relativa en el par\u00e1metro fname, como lo demostrado con la descarga del config.php."}], "id": "CVE-2007-0620", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-01-31T11:28:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/33001"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/23947"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/2197"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/458231/100/0/threaded"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/22265"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0383"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31915"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/33001"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/23947"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/2197"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/458231/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://www.securityfocus.com/bid/22265"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/0383"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31915"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}