CVE-2008-6914

CVE-2008-6914 affects Zeeways ZEEPROPERTY 1.0. Unrestricted file upload in viewprofile.php lets remote authenticated users upload a file with an executable extension as a profile photo and later access the file via a direct request to the file in companylogo/, enabling potential code execution. R...