CVE-2002-1422
FUDforum - Unauthenticated Arbitrary File Creation and Deletion via admbrowse.php Path Parameters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-1422. PoCs published by Ulf Harnhammar.
AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in FUDForum's 'admbrowse.php' script, allowing administrators to access files outside the intended directories. The provided URL demonstrates how an attacker could retrieve the '/etc/passwd' file by manipulating the 'cur' and 'dest' parameters.
Description
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters.
Exploits (1)
The exploit describes a directory traversal vulnerability in FUDForum's 'admbrowse.php' script, allowing administrators to access files outside the intended directories. The provided URL demonstrates how an attacker could retrieve the '/etc/passwd' file by manipulating the 'cur' and 'dest' parameters.