41!Kh4224Rdz

**Name of the Vulnerable Software and Affected Versions** ad manager wd version 1.0.11 **Description** An arbitrary file download issue allows unauthenticated attackers to retrieve sensitive files from the web server. By sending GET requests to the 'edit.php' endpoint with the `export` parameter set to 'export csv' and manipulating the `path` parameter, attackers can read files such as wp-config.php. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.