Security X2Engine 4.1.7 Unrestricted File Upload September 23, 2014 007admin Leave a comment X2Engine versions 4.1.7 and below suffer from an unrestricted file upload vulnerability due to poor use of a blacklist.