Arbitrary File Upload

picturecut is vulnerable to arbitrary file upload attacks. The vulnerability exists in upload.php where an unauthenticated user can upload arbitrary files...