The remote web server contains a PHP application is prone to an
arbitrary file upload vulnerability.
Description :
The remote host is running Mail-it Now! Upload2Server, a free, PHP
feedback form script supporting file uploads.
The version of Upload2Server installed on the remote host stores
uploaded files insecurely. An attacker may be able to exploit this
flaw to upload a file with arbitrary code and then execute it on the
remote host subject to the privileges of the web server user id.
