GuppY CMS 5.0.9 / 5.00.10 CSRF / Shell Upload

GuppY CMS versions 5.0.9 and 5.00.10 suffer from cross site request forgery and remote shell upload vulnerabilities.