MyRoom 3.5 GOLD - 'save_item.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/6644/info A problem with MyRoom may make it possible for remote attackers to upload files to a vulnerable system. Due to inadequate security checks performed by some PHP scripts, an attacker is able to upload arbitrary files to the system. Given the abili...