CVE-2013-1744

IRIS citations management tool through 1.3 allows remote attackers to execute arbitrary commands.