Description
RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.
References
- http://www.runcms.org/public/modules/news/
- 14869 third-party-advisory
- 20050406 runcms/e-xoops 1.1A and below file upload vulnerability mailing-list
- 13027 vdb-entry
- exoops-runcms-upload-files(20001) vdb-entry