A File Upload vulnerability exists in bbs 5.3 is via ForumManageAction.java in a GetType function, which lets a remote malicious user execute arbitrary code.Referenceshttps://github.com/diyhi/bbs/issues/51