Russcom PHPImages doesn’t validate if the uploaded file is an image, it just checks for the extension, thus allowing an attacker to upload php scripts with a .gif extension for example.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/46705/RusscomPHPImages.txt
Source: https://packetstormsecurity.com/files/46705/RusscomPHPImages.txt.html