CVE-2007-1698

download.php in Philex 0.2.3 and earlier allows remote attackers to read arbitrary files and source code, and obtain sensitive information via the file parameter.

Date published : 2007-03-26

http://www.securityfocus.com/bid/23111

https://www.exploit-db.com/exploits/3552