An issue in the getType function of BBS Forum v5.3 and below allows malicious users to upload arbitrary files.
diyhi bbs forum