Re: qDefense Advisory: DCForum allows remote read/write/execute

[MegaZone]

> Solution:
> 
> Patch dcboard.cgi to remove double dots and
poison nulls
> 
> Disable uploading

Note that DCScripts released a security patch on
3/31/2001 designed to address these issues:

http://www.dcscripts.com/FAQ/sec_2001_03_31.html

-MZ