Unrestricted file upload vulnerability in FileCloset before 1.1.5 allows remote attackers to upload arbitrary PHP files via unspecified vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/34587
http://www.securityfocus.com/bid/24228
http://sourceforge.net/project/shownotes.php?group_id=185741&release_id=512101
http://sourceforge.net/forum/forum.php?forum_id=700075