Security Advisory
CVE-2011-5136
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
showImg.php in EPractize Labs Subscription Manager, possibly 1.0, allows remote attackers to overwrite arbitrary files via the db parameter.