CVE-2016-4895

SetucoCMS allows remote authenticated users to execute arbitrary code.