Podcast Generator 'download.php' Directory Traversal Vulnerability

Bugtraq ID:	41473
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 08 2010 12:00AM
Updated:	Jul 08 2010 12:00AM
Credit:	BlackHawk
Vulnerable:	Podcast Generator Podcast Generator 0.96.2 Podcast Generator Podcast Generator 1.3 Podcast Generator Podcast Generator 1.2 Podcast Generator Podcast Generator 1.1 Podcast Generator Podcast Generator 1.0 beta 2 Podcast Generator Podcast Generator 1.0
Not Vulnerable:

Podcast Generator 'download.php' Directory Traversal Vulnerability

Podcast Generator is prone to a directory-traversal vulnerability because it fails to sufficiently validate user-supplied input data.

Exploiting the issue can allow an attacker to obtain sensitive information that may aid in further attacks.

Podcast Generator 1.3 running on Windows is vulnerable; other versions may also be affected.

Podcast Generator 'download.php' Directory Traversal Vulnerability

An attacker can exploit this issue via a browser.

Podcast Generator 'download.php' Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Podcast Generator 'download.php' Directory Traversal Vulnerability

References:

• Podcast Generator <= 1.3 Arbitrary File Download ( Windows ) (BlackHawk)
  
• Podcast Generator Homepage (Podcast Generator)