KSLabs KSWEB Code Injection Vulnerability

KSLabs KSWEB is an open source server. A code injection vulnerability exists in the handling of the KSLabs KSWEB hconfigFile parameter, which can be exploited by an attacker to submit a special request that can write arbitrary code and execute it...