Design/Logic Flaw

cgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the username field, as demonstrated by a username beginning with "admin|" to use the '|' metacharacter...

CVE-2017-18025: Improper Neutralization of Special Elements used in an OS Command

cgi-bin/drknow.cgi in Innotube ITGuard-Manager 0.0.0.1 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the username field, as demonstrated by a username beginning with "admin|" to use the '|' metacharacter...

PT-2018-1051

Name of the Vulnerable Software and Affected Versions Innotube ITGuard-Manager version 0.0.0.1 Description The issue is related to the execution of arbitrary OS commands via shell metacharacters in the username field of the cgi-bin/drknow.cgi script. This can be exploited by remote attackers,...