PHP remote file inclusion vulnerability in pdl_header.inc.php in PowerDownload 3.0.2 and 3.0.3 allows remote attackers to execute arbitrary PHP code via the incdir parameter to downloads.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Powerdownload | Powerscripts.org | 3.0.2 (including) | 3.0.2 (including) |
| Powerdownload | Powerscripts.org | 3.0.3 (including) | 3.0.3 (including) |