OS Command Injection in group.cgi in ASUSTOR ADM 3.1.1: Remote Root Command Execution

CVE-2018-12317 · HIGH Severity

AV:N/AC:L/AU:S/C:C/I:C/A:C

OS command injection in group.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root by modifying the "name" POST parameter.

Learn more about our Web Application Penetration Testing UK.