CVE-2014-125138 — Unrestricted dangerous file upload in C97net qEngine CMS, Kemana Directory and Cart Engine

C97net qEngine CMS through 6.0.0, Kemana Directory through 1.5.6, and Cart Engine through 3.0.0 contain an unrestricted file upload vulnerability in administrative image fields.