Vendor
Openupload 0.4.3 contains a command injection vulnerability allowing authenticated users to execute arbitrary commands by modifying the compression plugin configuration.