AttacheCase ver.3.3.0.0 and previous versions allows an arbitrary script execution via unspecified vectors.
hibara attachecase