CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component attachmentSystemAttachmentServices.php.Read More