PHP Nuke 6.7 is susceptible to allowing arbitrary file upload and execution via the file mailattach.php.