An issue in Home-Made.io fastmagsync v.1.7.51 and before allows a remote attacker to execute arbitrary code via the getPhpBin() component.
CWE-94 Improper Control of Generation of Code ('Code Injection')