HumHub versions 0.10.0 and below suffer from .htaccess file upload and remote code execution vulnerabilities.