DroboPix - demo API Command Injection (CVE-2018-14706)

Exploits DroboPix JSON injection in /DroboPix/api/drobopix/demo by writing command output under the DroboPix www tree. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """DroboPix demo API command injection CVE-2018-14706 — opens execute session.""" import re import...