Description
I-Man 0.9, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code by uploading a file attachment with a .php extension.
References
- iman-file-upload(20857) vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=331422
- 15558 third-party-advisory