Twiki/Fosswiki Unauthenticated Arbitrary File Upload (CVE-2014-7237)

An arbitrary file upload vulnerability has been reported in Twiki/Fosswiki. The vulnerability is due to lack of sanitization for user-supplied data. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...