Code injection

The loadModule function in lib/WebGUI/Asset.pm in WebGUI before 7.5.30 stable allows remote attackers to execute arbitrary code by uploading a Perl module and accessing it via a crafted URL...