Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
download.php in the MuddyDogPaws FileDownload snippet before 2.5 for MODx allows remote attackers to download arbitrary files, as demonstrated by downloading config.inc.php to obtain database credentials.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Modx FileDownload Snippet 'download.php'任意文件下载漏洞
Vulnerability Description
MODx MuddyDogPaws FileDownload snippet 2.5版本之前的版本的download.php允许远程攻击者下载任意文件,例如下载config.inc.php来获得数据库证书。
CVSS Information
N/A
Vulnerability Type
N/A