VulnCheck KEV: CVE-2011-5010

apps/a3/cfgethping.cgi in the Ctek SkyRouter 4200 and 4300 allows remote attackers to execute arbitrary commands via shell metacharacters in the PINGADDRESS parameter for a "u" action...

CVE-2020-11712

Open Upload through 0.4.3 allows XSS via index.php?action=u and the filename field...