OV3 Online Administration version 3.0 suffers from an authenticated remote code execution vulnerability.