CVE-2008-6944

CVE-2008-6944 describes an unrestricted file upload vulnerability in ScriptsFeed Auto Classifieds. Remote authenticated users could upload a file with an executable extension as a profile logo and then access it directly via cars_images/ to execute arbitrary code. The issue is caused by improper ...