← Back

Filedownload

filedownload

Vendor: Modxcms • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Modxcms
1Filedownload
Apr 23, 2026
Feb 1, 2007
N/A· v4
N/A· v3
7.5 HIGH· v2
download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.