PHPFusion versions 6.00.306 and below avatar mod_mime arbitrary file upload and local inclusion exploit.