CTparental before 4.45.07 is affected by a code execution vulnerability in the CTparental admin panel. Because The file \bl_categories_help.php\ is vulnerable to directory traversal an attacker can create a file that contains scripts and run arbitrary commands.