AttacheCase ver.2.8.4.0 and previous versions allows an arbitrary script execution via unspecified vectors.
hibara attachecase