CVE-2008-1985

This is a writeup describing a remote file upload vulnerability in DigitalHive, allowing attackers to upload a malicious file disguised as an image (e.g., 'php.jpg') via the user profile modification feature. The document also mentions an XSS vulnerability but lacks executable exploit code.

The provided text describes a cross-site scripting (XSS) vulnerability in Digital Hive 2.0 RC2, where user-supplied input is not properly sanitized. The vulnerability can be exploited via a crafted URL parameter to execute arbitrary script code in the context of the affected site.