CVE-2010-20059

CVE-2010-20059 affects FreeNAS 0.7.2 prior to revision 5543. The vulnerability arises in the web interface’s exec_raw.php where an unauthenticated cmd parameter is passed directly to the shell without sanitization, enabling remote command execution. Impact is substantial: arbitrary commands execu...