CVE-2009-0602

CVE-2009-0602 affects WikkiTikkiTavi 1.11: an unrestricted file upload in upload.php lets remote attackers execute arbitrary code by uploading a file with an executable extension and then accessing it under img/. Root cause is improper handling of uploaded files; CVSSv2 base score 7.5 (HIGH) as s...