CVE-2007-1427

CVE-2007-1427 describes a directory traversal vulnerability in AssetMan 2.4a and earlier, specifically within the download_pdf.php script. An unauthenticated remote attacker can exploit this flaw by manipulating the 'pdf_file' parameter with directory traversal sequences (e.g., '..') to read arbitrary files on the server. While the CVSS score is 5.0 (medium severity) due to its low attack complexity and impact limited to confidentiality, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.