CVE:CVE-2008-2216
CNNVD:CNNVD-200805-176
Project-Based Calendaring System (PBCS) 0.7.1版本中的src/yopy_upload.php存在未明文件上传漏洞。远程认证用户可以上传任意文件到tmp/uploads。
solution:Upgrade pbcs project-based_calendaring__system to a higher version than 0.7.1,and avoid the version 0.7.1