CVE-2012-3572 Information

Description

Open Source Competency Center (OSCC) MyMeeting 3.0.1 and earlier and MyMesyuarat 09b-1 does not properly verify uploaded documents which allows remote authenticated users to execute arbitrary PHP code via a crafted document.

Reference

http://sourceforge.net/projects/mymesyuarat/files/mymesyuarat/mymesyuarat20ver0.9b-2.zip/download http://www.mycert.org.my/en/services/advisories/mycert/2012/main/detail/904/index.html