CVE

Id
5806  
CVE No.
CVE-2002-1422  
Status
Candidate  
Description
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters.  
Phase
Proposed (20030317)  
Votes
ACCEPT(1) Cole | MODIFY(1) Baker | NOOP(2) Cox, Wall  
Comments
Baker> http://fud.prohost.org/CHANGELOG | The changelog addresses some of the fixes, but is vague