An issue in /admin/delete_image.php of eliteCMS v1.0 allows malicious users to delete arbitrary files.
elitecms elite cms 1.0