PHP-Fusion contains a flaw that allows an attacker to traverse outside of a restricted path. The issue is due to the /administration/db_backup.php script not properly sanitizing user input, specifically directory traversal style attacks (e.g., ../../) supplied via the 'file' parameter. This directory traversal attack would allow a remote attacker to delete arbitrary files.
Disclosure Timeline:
Disclosure Date :2013-02-27
Vendor Solution Date :2013-02-27
Vendor Informed Date :2012-09-27
Vendor Ack Date :2012-09-27
Exploit Publish Date :2013-02-27
