L. Weichselbaum

The issue allows remote authenticated users to include and execute arbitrary local files via a .. (dot dot) in the `lang` parameter. This can lead to a disruption of confidentiality, integrity, and availability of protected information. The exploitation can be carried out by a remote attacker who has passed the authentication procedure.

The issue allows remote attackers to bypass authentication in the Staging Webservice, enabling them to upload files, download files, list directories, and clear the server cache via crafted SOAP requests. This is possibly related to a direct request, and attackers can use arbitrary `Username` and `Password` values.