OS Command Injection

File Browser is vulnerable to OS Command Injection. The vulnerability is due to the Hook Authentication feature interpolating user-supplied username and password into an external shell command without proper sanitization, which allows an unauthenticated remote attacker to inject shell...