taocms v3.0.2 allows attackers to execute code injection via arbitrarily editing the .htaccess file.
CWE-94