CVE-2007-5732

no score yetEPSS 1.5%

elouai force download: no CVSS score yet. EPSS 1.5% chance of exploitation in the next 30 days.

Directory traversal vulnerability in downloadfile.php in eLouai's Force Download of media files script, as available on 20071030 and earlier, allows remote attackers to read arbitrary files via the file parameter. NOTE: this issue only occurs in environments where the system administrator has not followed the vendor recommendations that this product should only be used internally.

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2007-10-30
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

elouai:force_download

References

http://elouai.com/force-download.php
http://osvdb.org/39011
http://securityreason.com/securityalert/3321
http://www.securityfocus.com/archive/1/482679/100/0/threaded
http://elouai.com/force-download.php

Check your stack JSON