A vulnerability has been identified in PHP Easy Downloader, which could be exploited by attackers to gain unauthorized access to arbitrary files on a vulnerable system. This issue is caused by an input validation error in the "index.php" script that does not validate the "file" parameter before being passed as an argument to "header()", which could be exploited to download arbitrary files via directory traversal attacks.
Vulnerable Products
Vulnerable Software: PHP Easy Downloader version 1.5 and prior
