CVE-2009-2238

DMXReady Registration Manager 1.1 contains an unrestricted file upload vulnerability in includes/shared_scripts/wysiwyg_editor/assetmanager/assetmanager.asp. An attacker can upload a file with an executable extension and then access it directly under assets/webblogmanager to achieve remote code e...