edit_image.asp in Uapplication Uphotogallery allows remote attackers to upload arbitrary files.
CVSS Metrics