Directory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the webtool\application.py component.
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')