Webiness Inventory version 2.3 suffers from cross site request forgery and remote shell upload vulnerabilities.