CVE:CVE-2014-9567
CNNVD:CNNVD-201501-132
ProjectSend（前称cFTP）是一套基于PHP和MySQL的自托管应用程序。
ProjectSend r100版本至r561版本的process-upload.php脚本中存在任意文件上传漏洞。远程攻击者可通过发送直接的请求，上传并访问带有PHP扩展的文件利用该漏洞执行任意PHP代码。
solution:Upgrade projectsend projectsend to a higher version than 100,102,105,110,155,156,157,161,180,335,375,405,412,514,561,and avoid the version 100,102,105,110,155,156,157,161,180,335,375,405,412,514,561