CVE-2011-5083

Affected software: Dotclear 2.3.1 and 2.4.2. Vulnerable component: inc/swf/swfupload.swf. Issue: Unrestricted file upload allowing remote attackers to execute arbitrary PHP code by uploading a file with a PHP extension and accessing it via direct request in an unspecified directory. Root cause: u...