Edimax BR-6478AC v2.20 setWAN handler has authenticated command injection
A WAN-settings POST passes an unsanitized username into system(), and the check looks at one character.
1 stories, newest first · one card per story
A WAN-settings POST passes an unsanitized username into system(), and the check looks at one character.
Today 2.1K readers · 11K views · 8.8K reads · all time 158K views