D-Link DNS-320/325 - system_mgr.cgi SMS Test RCE

Exploits command injection in cgismstest via the command1 parameter on /cgi-bin/systemmgr.cgi distinct from CVE-2020-25506 NTP injection. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """D-Link DNS-320/325 systemmgr.cgi SMS test RCE — execute session.""" from...