CVE-2007-0620
FD Script <= 1.3.2 - Unauthenticated Arbitrary File Read via download.php fname Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-0620. PoCs published by ajann.
AI-analyzed exploit summary This is a writeup describing an information disclosure vulnerability in FD Script 1.32 and prior versions. The vulnerability allows an attacker to retrieve arbitrary files from the vulnerable system by manipulating the 'fname' parameter in the 'download.php' script.
Description
download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php.
Exploits (2)
This is a writeup describing an information disclosure vulnerability in FD Script 1.32 and prior versions. The vulnerability allows an attacker to retrieve arbitrary files from the vulnerable system by manipulating the 'fname' parameter in the 'download.php' script.
This exploit demonstrates a directory traversal vulnerability in FdScript <= v1.3.2, allowing remote file disclosure via a crafted URL. The PoC shows how to access arbitrary files by manipulating the 'fname' parameter in the download.php script.