CVE-2009-0372

The CVE-2009-0372 vulnerability affects Miltenovik Manojlo MemHT Portal (versions 4.0.1 and earlier). An authenticated remote user can upload a file with an executable extension using the editProfile action and then access the uploaded file from images/avatar/uploaded/ to execute arbitrary code. ...