Tenda W30E: Operating System Command Injection Vulnerability

The Tenda W30E is a router from Tenda China. An operating system command injection vulnerability exists in the Tenda W30E version V1.0.1.25633, which originates from a command injection vulnerability via the fileNameMit parameter of /goform/delFileName...