System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ftpUser" POST parameter...
9.8CVSS5.9AI score0.03195EPSS
SaveExploits1References1
OSV•added 2018/11/26 11:29 p.m.•3 views
CVE-2018-13311
System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "sambaUser" POST parameter...
