Unspecified vulnerability in phpMyFAQ 1.6.9 and earlier, when register_globals is enabled, allows remote attackers to "gain the privilege for uploading files on the server."
https://exchange.xforce.ibmcloud.com/vulnerabilities/32573
http://www.phpmyfaq.de/advisory_2007-02-18.php