qdPM 9.1 Authenticated Arbitrary PHP File Upload (RCE)

Related Vulnerabilities: CVE-2015-3884