Directory traversal vulnerability in Mike Spice's My Classifieds (classifieds.cgi) before 1.3 allows remote attackers to overwrite arbitrary files via the category parameter.
http://www.securityfocus.com/bid/3855
http://www.kb.cert.org/vuls/id/181907