Description
在MySpace Content Zone (MCZ) 3.x中的admin/uploadgames.php不要求管理权限，这会允许远程攻击者无限制上传文件，例如(１)a .php文件(２)a .php%00.jpeg文件。
MySpace Content Zone 'uploadgames.php' 任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/4741
https://nvd.nist.gov/vuln/detail/CVE-2007-6668
https://cve.imfht.com/detail/CVE-2007-6668
https://avd.aliyun.com/detail?id=AVD-2007-6668
https://www.wafai.cn/vulnerabilities/CVE-2007-6668
https://zone.ci/e/search/result/index.php?page=14&searchid=107