CAPEC Related Weakness
Upload a Web Shell to a Web Server
CWE-287 Improper Authentication
CWE-553 Command Shell in Externally Accessible Directory