CVE-2008-6948

The CVE-2008-6948 entry describes an Unrestricted file upload vulnerability in Collabtive 0.4.8. A remote authenticated user can upload a file with an executable extension and a text/plain MIME type, then access it via a direct request to the file in the files/ directory to execute arbitrary code...