CVE-2012-5190

CVE-2012-5190 concerns Prizm Content Connect 5.1, which is vulnerable to an arbitrary file upload in the web document viewer. The root cause is the handling of a document parameter (default.aspx) that can download a remote file and save it to the server, enabling an attacker to place a crafted fi...