CVE-2022-40475: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK A860R V4.1.2cu.5182B20201027 was discovered to contain a command injection via the component /cgi-bin/downloadFile.cgi...

PT-2019-14991

Name of the Vulnerable Software and Affected Versions FiberHome HG2201T version 1.00.M5007 JS 201804 Description The issue allows pre-authentication Directory Traversal for reading arbitrary files via the /var/WEB-GUI/cgi-bin/downloadfile.cgi API endpoint. Recommendations For FiberHome HG2201T...