An Unrestricted file upload vulnerability was found in "/Membership/edit_member.php" of Kashipara Live Membership System v1.0, which allows attackers to execute arbitrary code via uploading a crafted PHP file.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')