applications/luci-app-ddns/luasrc/model/cbi/ddns/detail.lua in the DDNS package for OpenWrt 19.07 allows remote authenticated users to inject arbitrary commands via POST requests.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
openwrt openwrt 19.07.0 |