CVE-2007-1150

CVE-2007-1150 describes an unrestricted file upload vulnerability in LoveCMS 1.4. The issue allows remote authenticated administrators to upload arbitrary files to /modules/content/pictures/tmp/. The affected component is the LoveCMS content handling/upload path; the root cause is unrestricted fi...