Unrestricted file upload vulnerability in src/yopy_upload.php in Project-Based Calendaring System (PBCS) 0.7.1 allows remote authenticated users to upload arbitrary files to tmp/uploads.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Project-based_calendaring__system | Pbcs | 0.7.1 (including) | 0.7.1 (including) |