kodbox command injection vulnerability

kodbox is a network file manager. A command injection vulnerability exists in kodbox version 1.48, which stems from a manipulation of the parameter soffice that results in command injection...