NETGEAR ReadyNAS np_handler Code Execution (CVE-2013-2751)

A security vulnerability was found in FrontView web interface in NETGEAR ReadyNAS RAIDiator. The vulnerability is due to the nphandler.pl script failing to sanitize input. A remote attacker can exploit this weakness by execute arbitrary Perl code via a crafted request...

CVE-2013-2751

The CVE-2013-2751 entry concerns NETGEAR ReadyNAS RAIDiator (FrontView) via np_handler.pl. A Perl eval() usage flaw in frontview/lib/np_handler.pl allows remote code execution through crafted requests (notably related to the forgot password workflow), enabling unauthenticated RC across affected v...