Arbitrary File Write

SABnzbd allows arbitrary file write. The filesystem.renamer function allows writing of downloaded files outside the configured download folder using a malicious PAR2 file...