Remote Code Execution

tribalsystems/zenario is vulnerable to remote code execution. It is possible for a remote attacker to upload and execute malicious code on the system via the vulnerable handlePluginAJAX function in modulecode.php which resides inside User Form module, when the file upload is enabled...