CVE-2015-5946

SuiteCRM 7.2.2 is affected by an Incomplete blacklist vulnerability that allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension. Root cause: improper filtering during file upload. Impact: execution of arbitrary code with partial impacts to con...