Unrestricted file upload

A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to the web root and execute system commands...

CVE-2015-5951: Unrestricted Upload of File with Dangerous Type

A file upload issue exists in the specid parameter in Thomson Reuters FATCH before 5.2, which allows malicious users to upload arbitrary PHP files to the web root and execute system commands...

PT-2020-7871

Name of the Vulnerable Software and Affected Versions: Thomson Reuters FATCH versions prior to 5.2 Description: A file upload issue exists in the specid parameter, allowing malicious users to upload arbitrary PHP files to the web root and execute system commands. Recommendations: For versions pri...