CVE:CVE-2005-1031
CNNVD:CNNVD-200505-091
RUNCMS 1.1A和可能基于e-Xoops (exoops)的其他产品，当启用"Allow custom avatar upload"时，并不能正确地验证上传的文件，从而允许远程攻击者上传任意文件。
solution:Upgrade e-xoops e-xoops to a higher version than 1.05r3,and avoid the version 1.05r3; Upgrade runcms runcms to a higher version than 1.1,1.1a,and avoid the version 1.1,1.1a