CVE-2008-3232

Dotclear 1.2.7.1 and earlier are affected by an unrestricted file upload vulnerability in ecrire/images.php. Remote authenticated users can upload a file with an executable extension and access it directly in images, enabling arbitrary code execution. Affected versions: Dotclear 1.2.7.1 and earli...