Popcorn Time 'Subtitles' Dropdown Remote Code Execution Vulnerability

Bugtraq ID:	98647
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 23 2017 12:00AM
Updated:	May 23 2017 12:00AM
Credit:	Check Point researcher.
Vulnerable:	Popcorn Time Popcorn Time 0.3.8 Beta Popcorn Time Popcorn Time 0.3.7 beta Popcorn Time Popcorn Time 0.3.6 Beta Popcorn Time Popcorn Time 0.3.5 Beta Popcorn Time Popcorn Time 0.3.4 Beta Popcorn Time Popcorn Time 0.3.3 Beta Popcorn Time Popcorn Time 0.3.2 Beta Popcorn Time Popcorn Time 0.3.1 Beta Popcorn Time Popcorn Time 0.3 beta Popcorn Time Popcorn Time 0.2.9 Beta Popcorn Time Popcorn Time 0.2.8 Beta Popcorn Time Popcorn Time 0.2.6 Beta Popcorn Time Popcorn Time 0.2.5 Beta Popcorn Time Popcorn Time 0.2 beta Popcorn Time Popcorn Time 0.1 alpha
Not Vulnerable:	Popcorn Time Popcorn Time 0.3.10

Popcorn Time 'Subtitles' Dropdown Remote Code Execution Vulnerability

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.