MC Coming Soon script suffers from arbitrary file upload and improper access restriction vulnerabilities.