Privilege Escalation

billz/raspap-webgui is vulnerable to Privilege Escalation via OS commaind injection. An attacker can send an input of "a && whoami" to append strval$POST'connect' to the end of the exec function in configureclient.php , executing /etc/raspap/hostapd/enablelog.sh as root with no password and...