PT-2012-2061

Name of the Vulnerable Software and Affected Versions Dotclear versions 2.3.1 through 2.4.2 Description The issue allows remote attackers to execute arbitrary code by uploading a file with an executable PHP extension, then accessing it via a direct request to the file in an unspecified directory...