An arbitrary file creation vulnerability in UReport 2.2.9 allows attackers to execute arbitrary code.