2018-09-23 18:00:00
mitre
PUBLISHED
OTCMS 3.61 allows remote attackers to execute arbitrary PHP code via the accBackupDir parameter.