The vulnerability in the lib/NSSDropoff.php web application script for transferring ZendTo files allows a hacker to execute arbitrary commands.

The vulnerability in the lib/NSSDropoff.php web application for transferring files of the ZendTo format exists due to the lack of measures taken to neutralize special elements used in the operating system’s command processing when handling the tmpname parameter. Exploiting this vulnerability allo...