CVE-2011-4828

CVE-2011-4828 is an unrestricted file upload vulnerability in AutoSec Tools V-CMS 1.0, specifically within the includes/inline_image_upload.php component. This flaw allows unauthenticated remote attackers to execute arbitrary code by uploading files with executable extensions and then directly accessing them in the /temp directory. With a CVSS score of 7.5, it poses a high risk of confidentiality, integrity, and availability compromise due to its low attack complexity and network-based vector. Exploit code, including a Metasploit module, is publicly available, though there is no evidence of active exploitation or significant community discussion.