CVE-2019-12771: Improper Neutralization of Special Elements used in an OS Command

Command injection is possible in ThinStation through 6.1.1 via shell metacharacters after the cgi-bin/CdControl.cgi action= substring, or after the cgi-bin/VolControl.cgi OK= substring...

PT-2019-12934

Name of the Vulnerable Software and Affected Versions ThinStation versions prior to 6.1.2 Description Command injection is possible through shell metacharacters after the "cgi-bin/CdControl.cgi" action= substring, or after the "cgi-bin/VolControl.cgi" OK= substring. Recommendations For versions...