osCmax version 2.5.4 suffers from code execution, cross site request forgery, and local file inclusion vulnerabilities. Continue reading...