Sitemagic CMS v4.4 has XSS in SMFiles/FrmUpload.class.php via the filename parameter.Referenceshttp://www.iwantacve.cn/index.php/archives/175/