As with many exploits, remote and local file inclusions are only a problem at the end of the encoding. Of course, it takes a second person to have it. Now, this article will hopefully give you an idea ...
The following PHP functions and Server port need to be enabled or open for CMS Form Assets to work properly. Please see the next section for file upload settings. These items are needed for the file ...