Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary files via the item parameter.
Directory traversal vulnerability
Exploit
CVE-2015-5952
NVD
Refer to CVE-2015-5952 NVD advisory