CVE-2007-3692: Kddi Ezfactory Download Cgi

High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days.

Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary files via a .. (dot dot) in the name parameter.

Affected products

• Kddi Ezfactory Download Cgi: version 1.0 only

Published 2007-07-11. Last modified 2026-06-16.