PT-2012-6174

Name of the Vulnerable Software and Affected Versions Havalite CMS versions 1.1.0 and earlier Description The issue allows remote attackers to execute arbitrary code by uploading a file with a .php;.gif extension to hava upload.php, then accessing it via a direct request to the file in tmp/files/...