Security Advisory
CVE-2007-5720
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Unrestricted file upload vulnerability in the profiles script in ProfileCMS 1.0 allows remote attackers to upload and execute arbitrary PHP code via unspecified vectors involving creation of a profile.