CVE-2015-2974 in PHP Gazou BBS Plus
Summary
LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.