CVE
- Id
- 5806
- CVE No.
- CVE-2002-1422
- Status
- Candidate
- Description
- admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters.
- Phase
- Proposed (20030317)
- Votes
- ACCEPT(1) Cole | MODIFY(1) Baker | NOOP(2) Cox, Wall
- Comments
- Baker> http://fud.prohost.org/CHANGELOG | The changelog addresses some of the fixes, but is vague