Secunia

A vulnerability has been reported in WebGUI, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to certain email attachments not being properly restricted from being stored. This can be exploited to e.g. execute arbitrary PHP and Perl code by sending an email containing a malicious attachment to the collaboration system. The attached file is executed if viewed from within the collaboration web view.

Successful exploitation requires that the web server is configured to execute the uploaded file type.

Solution
Reportedly, this will be fixed in version 7.5.35, which should be available soon.
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.webgui.org/getwebgui/advisories/security-executable-upload-problem

Deep Links
Links available in Customer Area