An issue exists in CIPPlanner CIPAce 9.1 Build 2019092801. Upload.ashx allows remote malicious users to execute arbitrary code by uploading and executing an ASHX file.
cipplanner cipace