CVE-2007-0659

Published: Feb 1, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.

Affected (2)

Products: Modxcms: Filedownload

Modxcms

1 product

Filedownload

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Modxcms Filedownload	Version 1.7
Modxcms Filedownload	Version 2.0

References (10)

http://modxcms.com/forums/index.php/topic%2C10470.0.html

Source: cve@mitre.org

http://secunia.com/advisories/23953

Source: cve@mitre.org

PatchVendor Advisory

http://www.muddydogpaws.com/Home.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/22327

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2007/0426

Source: cve@mitre.org

http://modxcms.com/forums/index.php/topic%2C10470.0.html