CVE-2007-1698 download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information via the file parameter.
MediumCVSS 5.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information via the file parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| philex | <= 0.2.3 | No fix listed |
References
- 23111 exploit vdb-entry
- ADV-2007-1099 vdb-entry
- philex-download-file-disclosure(33181) vdb-entry
- 3552 exploit