Monstra CMS 3.0.4 allows users to upload arbitrary files, which leads to remote command execution on the server, for example because .php (lowercase)...

参照URL

• patch github.com
• report blogs.securiteam.com
• report securityprince.blogspot.in
• report exploit-db.com