C-MOR Video Surveillance version 5.2401 suffers from a remote shell upload vulnerability.