Security

  Text :  

# Application Info:
# Name: dedecms
# Version: v5.3
# Website: http://dedecms.com

# Discoverd By: Securitylab.ir
# Website: http://securitylab.ir
# Contacts: admin[at]securitylab.ir & info_at_securitylab[dot]ir

# Vulnerability Info:
# Type: Arbitrary File Upload Vulnerability
# Risk: High
#===========================================================
# http://site.com/member/uploads_edit.php
# select file and uploaded
# file allowed : file.jpg.php
#===========================================================

# Securitylab Security Research Team

  References :  

http://seclists.org/bugtraq/2009/Jun/0269.html