CVE-2008-5794: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in system/admin/images.php in LoveCMS 1.6.2 Final allows remote attackers to delete arbitrary files via a .. dot dot in the delete parameter...

CVE-2007-3432: Undefined Security Weakness

Unrestricted file upload vulnerability in admin/images.php in Pluxml 0.3.1 allows remote attackers to upload and execute arbitrary PHP code via a .jpg filename...