File Thingie version 2.5.4 suffers from an arbitrary shell upload vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/76289/filethingie-upload.txt
Source: https://packetstormsecurity.com/files/76289/File-Thingie-2.5.4-Shell-Upload.html