CVE-2015-5082: Improper Neutralization of Special Elements used in a Command

Endian Firewall before 3.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the 1 NEWPASSWORD1 or 2 NEWPASSWORD2 parameter to cgi-bin/chpasswd.cgi...