CVE:CVE-2007-4905
CNNVD:CNNVD-200709-199
AuraCMS 2.1中的mod/contak.php存在不限制文件上传漏洞，远程攻击者可以借助image参数上传并执行任意PHP文件，该操作把文件放入files/下。
solution:Upgrade auracms auracms to a higher version than 2.1,and avoid the version 2.1