Belkin Linksys WRT160NL Command Injection (CVE-2021-25310)

A command injection vulnerability exists in Belkin Linksys WRT160NL. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary commands on the affected system...

CVE-2021-25310

CVE-2021-25310 affects Belkin Linksys WRT160NL devices (firmware 1.0.04.002_US_20130619). The issue is a command-injection vulnerability in the admin web interface: remote authenticated attackers can inject shell commands via shell metacharacters in the ui_language POST parameter sent to apply.cg...