Vendor
AB Download Manager versions prior to 1.11.2 are vulnerable to a cross-site request forgery attack allowing unauthenticated remote attackers to write arbitrary files to the filesystem, potentially facilitating remote code execution.