Simple PHP Blog suffers from insecure default permissions and lack of validation on uploaded images. Proof of concept code included.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39653/sphpblog.txt
Source: https://packetstormsecurity.com/files/39653/sphpblog.txt.html