newswire/uploadmedia.cgi in 2coolcode Our Space (Ourspace) 2.0.9 allows remote attackers to upload certain files via unspecified vectors, probably involving unrestricted functionality in uploadmedia.cgi.
https://www.exploit-db.com/exploits/4343
https://exchange.xforce.ibmcloud.com/vulnerabilities/36350
http://www.securityfocus.com/bid/25487