An issue in DataEase v1 allows an attacker to execute arbitrary code via the user account and password components.