An issue exists in Concrete CMS up to and including 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression.
concretecms concrete cms