CVE-2005-1821

HIGH 7.5CVE-2005-1821 · Published 01/06/2005 · updated 16/06/2026

In short

CVE-2005-1821 is a HIGH (CVSS 7.5) vulnerability affecting powerdownload (powerscripts.org).
Chance of exploitation in the next 30 days (EPSS): 2.9%, higher than 87.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
powerdownload powerscripts.org	`= 3.0.2= 3.0.3`	No fix yet

Description

PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php.

References

marc.info
secunia.com/advisories/15537 · Vendor Advisory
securitytracker.com/id · Exploit
securityfocus.com/bid/13822 · Exploit
soulblack.com.ar/repo/papers/advisory/powerdownload_advisory.txt · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free