Design/Logic Flaw

AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors...