Description
Directory traversal vulnerability in chuid 1.2 and earlier allows remote attackers to change the ownership of files outside of the upload directory via a .. (dot dot) attack.
References
- chuid-unauthorized-ownership-change(7976) vdb-entry
- 20020121 security vulnerability in chuid mailing-list
- 3937 vdb-entry