The jQuery jui_filter_rules parsing library suffers from an arbitrary php remote code execution vulnerability.