CVE-2017-15956 – ConverTo Video Downloader & Converter 1.4.1 - Arbitrary File Download

https://notcve.org/view.php?id=CVE-2017-15956

29 Oct 2017 — ConverTo Video Downloader & Converter 1.4.1 allows Arbitrary File Download via the token parameter to download.php. ConverTo Video Downloader & Converter 1.4.1 permite la subida de archivos arbitrarios mediante el parámetro token en download.php. • https://www.exploit-db.com/exploits/42927 • CWE-20: Improper Input Validation •