An attacker can exploit this issue to inject and execute arbitrary malicious PHP code in the context of the webserver process. This may facilitate a compromise of the application and the underlying system; other attacks are also possible.
Network Shutdown Module 3.21 build 01 is vulnerable; other versions may also be affected.
Vendor Status:
Currently, we are not aware of any vendor-supplied patches.