Webfactory N&P CMS suffers from an arbitrary file upload vulnerability. Note that this advisory has site-specific information.