Security X2Engine 4.2 Arbitrary File Upload September 25, 2015 007admin Leave a comment X2Engine version 4.2 suffers from a remote arbitrary file upload vulnerability.