CVE-2007-0659

high

Description

download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.

References

http://www.vupen.com/english/advisories/2007/0426

http://www.securityfocus.com/bid/22327

http://www.muddydogpaws.com/Home.html

http://secunia.com/advisories/23953

http://modxcms.com/forums/index.php/topic%2C10470.0.html

Details

Source: Mitre, NVD

Published: 2007-02-01

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N