Legrand SMS PowerView Redirect-Based File Inclusion Vulnerability

A critical file inclusion vulnerability has been identified in Legrand SMS PowerView versions 1.x. The issue arises from an unknown function that allows remote attackers to manipulate the 'redirect' argument, leading to unauthorized file inclusion. This vulnerability has been publicly disclosed and is accompanied by a proof-of-concept exploit.

Impact

Exploitation of this vulnerability allows for file inclusion, which could be leveraged to execute arbitrary code or access sensitive information, depending on the included file.