Some services have an unquoted service path. If an authenticated user is able to insert code in the system root path, that code can be executed during the application startup.
Unquoted Search Path or Element
exacqVision server Versions 9.6 and 9.8
Users should upgrade to the latest product, Version 19.03