CVE-2005-1821

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-06-01 · updated 2026-06-16

Description

PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php.

Affected products

Powerscripts.Org Powerdownload: 3.0.2, 3.0.3

References

http://marc.info/?l=bugtraq&m=111755754126095&w=2
http://secunia.com/advisories/15537
http://securitytracker.com/id?1014078
http://www.securityfocus.com/bid/13822
http://www.soulblack.com.ar/repo/papers/advisory/powerdownload_advisory.txt
http://marc.info/?l=bugtraq&m=111755754126095&w=2
http://secunia.com/advisories/15537
http://securitytracker.com/id?1014078
http://www.securityfocus.com/bid/13822
http://www.soulblack.com.ar/repo/papers/advisory/powerdownload_advisory.txt

Get alerted when CVE-2005-1821 or the next vulnerability affects your stack