high7.5Public exploit code
CVE-2005-1821
PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PowerDownload 3.0.2/3.0.3 - IncDir Remote File Inclusion2005-05-31 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Powerscripts.Org | Powerdownload | Versions 3.0.2, 3.0.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=111755754126095&w=2
- http://secunia.com/advisories/15537
- http://securitytracker.com/id?1014078
- http://www.securityfocus.com/bid/13822
- http://www.soulblack.com.ar/repo/papers/advisory/powerdownload_advisory.txt
- http://marc.info/?l=bugtraq&m=111755754126095&w=2
- http://secunia.com/advisories/15537
- http://securitytracker.com/id?1014078
- http://www.securityfocus.com/bid/13822
- http://www.soulblack.com.ar/repo/papers/advisory/powerdownload_advisory.txt