CVE-2007-0620
download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative p…
Published: 2007-01-31 · CVSS: Unscored
download.php in FD Script 1.3.2 and earlier allows remote attackers to read source of files under the web document root with certain extensions, including .php, via a relative pathname in the fname parameter, as demonstrated by downloading config.php.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7