CVE-2007-4905

Unrestricted file upload vulnerability in mod/contak.php in AuraCMS 2.1 allows remote attackers to upload and execute arbitrary PHP files via the image parameter, which places a file under files/.

Date published : 2007-09-17

http://www.securityfocus.com/bid/25621

https://www.exploit-db.com/exploits/4390