PT-2020-7392

Name of the Vulnerable Software and Affected Versions: Zavio IP Cameras versions 1.6.3 and earlier Description: A Command Injection issue exists via the ap parameter to "/cgi-bin/mft/wireless mft.cgi" API endpoint, which could let a remote malicious user execute arbitrary code. Recommendations: F...

CVE-2013-2573: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in the ap parameter to the /cgi-bin/mft/wirelessmft.cgi file in TP-Link IP Cameras TL-SC 3130, TL-SC 3130G, 3171G. and 4171G 1.6.18P12s, which could let a malicious user execute arbitrary code...

CVE-2013-2568: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in Zavio IP Cameras through 1.6.3 via the ap parameter to /cgi-bin/mft/wirelessmft.cgi, which could let a remote malicious user execute arbitrary code...