Security Advisory
CVE-2006-6463
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Unrestricted file upload vulnerability in admin/add.php in Midicart allows remote authenticated users to upload arbitrary .php files, and possibly other files, to the images/ directory under the web root.