Hosting Controller 'EnableForum.asp' and 'DisableForum.asp' Scripts Let Remote Users Create or Delete Forums and Virtual Directories

advisory :
http://www.kapda.ir/advisory-442.html
http://securitytracker.com/alerts/2006/Oct/1017103.html