LEMON-S PHP Gazou BBS plus prior to 2.36 allows remote malicious users to upload arbitrary HTML documents via vectors involving a crafted image file.
lemon-s php gazou bbs plus