• info
• discussion
• exploit
• solution
• references

FD Script FName Parameter Information Disclosure Vulnerability

Attackers can exploit this vulnerability with a standard web browser.

An example URI has been provided:

http://www,example.com/download.php?fname=[SOURCE FILE]