Security Advisory
CVE-2015-2974
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file.