CVE-2007-0659: High severity Modxcms Filedownload vulnerability
download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0659?
CVE-2007-0659 has a severity rating that reflects its potential to allow remote attackers to access sensitive files on affected systems.
How do I fix CVE-2007-0659?
To fix CVE-2007-0659, update to version 2.5 or later of the MuddyDogPaws FileDownload snippet for MODx.
What software is affected by CVE-2007-0659?
CVE-2007-0659 affects versions 1.7 and 2.0 of the MuddyDogPaws FileDownload snippet for MODx.
What are the consequences of exploiting CVE-2007-0659?
Exploiting CVE-2007-0659 allows an attacker to download arbitrary files, which could lead to exposure of sensitive information such as database credentials.
Is there a workaround for CVE-2007-0659 if I cannot update?
If you cannot update to a fixed version, consider restricting access to the download.php file or implementing additional security measures to minimize risk.