CVE
- Id
- 5807
- CVE No.
- CVE-2002-1423
- Status
- Candidate
- Description
- tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read arbitrary files via an absolute pathname in the file parameter.
- Phase
- Proposed (20030317)
- Votes
- ACCEPT(1) Cole | MODIFY(1) Baker | NOOP(2) Cox, Wall
- Comments
- Baker> http://fud.prohost.org/CHANGELOG | The change log addresses some of the fixes, but is very vague