| Package | Affected versions | Patched versions |
|---|---|---|
| fudforum | = 1.2.8= 1.9.8= 2.0.2 |
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create or delete files via URL-encoded pathnames in the cur and dest parameters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free