CVE-2013-4949

CVE-2013-4949 affects MachForm 2, specifically an unrestricted file upload vulnerability in view.php. An attacker can upload a PHP file and access it in the upload directory (data/), allowing remote code execution. The NVD summary cites MachForm 2 as vulnerable to arbitrary PHP execution via a cr...