docuFORM Managed Print Service Client 11.11c is vulnerable to arbitrary file upload via pmupdate.php.