ACEweb Online Portal 3.5.065 was discovered to contain an unrestricted file upload vulnerability via attachments.awp.Referenceshttp://aceware.comhttp://aceweb.comhttps://www.aceware.com/forum/viewtopic.php?f=7&t=481