ProcessFileUpload.jsp in SolarWinds Storage Manager prior to 6.2 allows remote malicious users to upload and execute arbitrary files via unspecified vectors.
solarwinds storage manager