Sign in Subscribe

← All advisories

Unrated severityNVD Advisory· Published Apr 11, 2003· Updated Apr 16, 2026

CVE-2002-1422

CVE-2002-1422

Description

admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters.

Affected products

3

Fudforum/Fudforum3 versions
cpe:2.3:a:ilia_alshanetsky:fudforum:1.2.8:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ilia_alshanetsky:fudforum:1.2.8:*:*:*:*:*:*:*
- cpe:2.3:a:ilia_alshanetsky:fudforum:1.9.8:*:*:*:*:*:*:*
- cpe:2.3:a:ilia_alshanetsky:fudforum:2.0.2:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

4

www.iss.net/security_center/static/9901.phpnvdPatchVendor Advisory
online.securityfocus.com/archive/1/288042nvdExploitVendor Advisory
www.securityfocus.com/bid/5502nvdExploitPatchVendor Advisory
archives.neohapsis.com/archives/vulnwatch/2002-q3/0082.htmlnvd

News mentions

0

No linked articles in our index yet.