CVE-2020-10583: Improper Neutralization of Special Elements used in an OS Command

The /admin/admapi.php script of Invigo Automatic Device Management ADM through 5.0 allows remote authenticated attackers to execute arbitrary OS commands on the server as the user running the application...