Security Advisory
CVE-2015-5946
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Incomplete blacklist vulnerability in SuiteCRM 7.2.2 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension.