CVE-2008-6769

Name of the Vulnerable Software and Affected Versions: YourPlace versions 1.0.2 and earlier

Description: The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to the upload.php endpoint, and then accessing it via a direct request to the file.

Recommendations: For versions 1.0.2 and earlier, consider restricting access to the upload.php endpoint until a fix is available, and avoid allowing uploads of files with executable extensions.