CVE-2007-1129

Multiple unrestricted file upload vulnerabilities in MTCMS 3.2 allow remote attackers to upload and execute files via (1) an avatar upload in an add_down action, or (2) an add_link action.

Date published : 2007-02-26

http://www.securityfocus.com/bid/22690

http://www.securityfocus.com/archive/1/461330/100/100/threaded