A PHP File Upload Vulnerability exists in PolarBear CMS 2.5 via upload.php, which could let a malicious user execute arbitrary code.
A PHP File
Exploit
CVE-2013-0803
NVD
Refer to CVE-2013-0803 NVD advisory