PHPFusion versions 6.00.306 and below avatar mod_mime arbitrary file upload and local inclusion exploit.
5e61c05f77a12f36d67b4c5a761b9f9ce21eb52a10a73d49a779f85c63d866fc
The PHP-Fusion Avatar_Studio module suffers from a local file inclusion vulnerability.
08c4f81c215efafb3c0c90b331fe4e1959d31327d1cde1eb5d7076b648e23938