The Etherpad Lite ep_imageconvert Plugin has a Remote Command Injection Vulnerability
The Etherpad Lite
Exploit
CVE-2013-7380
NVD
Refer to CVE-2013-7380 NVD advisory