CVE-2008-6684

CVE-2008-6684 describes an unrestricted file upload vulnerability in editimage.php of the Apartment Search Script. An attacker can upload a file with an executable extension bearing a GIF header and then access the renamed file via a direct request to Elephant/Member_Admin/logo/ to execute arbitr...