CVE-2014-8945: Improper Neutralization of Special Elements used in an OS Command

admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields...