Unscored CVE-2018-13306 EUVD-2018-5254GHSA-whqg-c7jg-f4rh

System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ftpUser" POST p…

Published Nov 27, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ftpUser" POST parameter.