CVE:CVE-2007-0659
CNNVD:CNNVD-200702-001
MODx MuddyDogPaws FileDownload snippet 2.5版本之前的版本的download.php允许远程攻击者下载任意文件，例如下载config.inc.php来获得数据库证书。
solution:Upgrade modxcms filedownload to a higher version than 1.7,2.0,and avoid the version 1.7,2.0