D-Link’s various products have command injection vulnerabilities

D-Link DNS-325 and others are a NAS Network Attached Storage device from China's D-Link Corporation. A command injection vulnerability exists in various D-Link products, which originates from a command injection flaw in the fpath parameter of the webdavmgr function in the /cgi-bin/webdavmgr.cgi...