CVE-2015-5951

Name of the Vulnerable Software and Affected Versions: Thomson Reuters FATCH versions prior to 5.2

Description: A file upload issue exists in the specid parameter, allowing malicious users to upload arbitrary PHP files to the web root and execute system commands.

Recommendations: For versions prior to 5.2, update to version 5.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the file upload feature to minimize the risk of exploitation. Avoid using the specid parameter in file upload operations until the issue is resolved.