File upload vulnerability in aitecms

AIT Content Management System aitecms is a customer information management system developed by php + MySQL the original dream core. aitecms there is a file upload vulnerability, the vulnerability is due to publish document module to upload pictures did not do the validation, the attacker can use...