"Powered by FUDforum"

• SHDB
• 2205 阅读

• 日期：2004-10-11
• 类别：
  • Advisories and Vulnerabilities
• 作者：anonymous
• 语法："Powered by FUDforum"

• FUDforum is a forums package. It uses a combination of PHP & MySQL to create a portable solution that can run on virtually any operating system. FUDforum has two security holes that allow people to download or manipulate files and directories outside of FUDforum's directories. One of the holes can be exploited by everyone, while the other requires administrator access. The program also has some SQL Injection problems. http://www.securityfocus.com/bid/5501