WS-2018-0095

All versions of buttle are vulnerable to command injection. Remote command execution is possible when buttle is run with the --php-bin flag...