Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item parameter.Referenceshttp://seclists.org/fulldisclosure/2015/Aug/24