CVE-2008-2267

Incomplete blacklist vulnerability in javaUpload.php in Postlet in the FileManager module in CMS Made Simple 1.2.4 and earlier allows remote attackers to execute arbitrary code by uploading a file with a name ending in 1 .jsp, 2 .php3, 3 .cgi, 4 .dhtml, 5 .phtml, 6 .php5, or 7 .jar, then accessin...