CVE-2008-2988

Benja CMS 0.1 contains an unrestricted file upload vulnerability in admin/upload.php. The issue lets remote attackers upload and execute arbitrary PHP files by unspecified vectors, followed by directly requesting the uploaded file in billeder/. Root cause is an improper validation of uploaded con...