D-Link DAP-1860 OS Command Injection Vulnerability

The D-Link DAP-1860 is a WiFi range extender from AUO D-Link of Taiwan, China. An operating system command injection vulnerability exists in the HNAP service in the D-Link DAP-1860 using firmware version 1.04b01 and earlier, where the program fails to properly validate user-submitted characters...