CVE-2009-3716

CVE-2009-3716 describes an unrestricted file upload vulnerability in MCshoutbox 1.1. The flaw exists in the admin.php upload handling, allowing remote authenticated users to upload a file with an executable extension and then access it via a direct request to the file under the smilies/ directory...