OpenWebif 'CallOPKG' Function Remote Command Execution Vulnerability

OpenWebif is an open source web interface plug-in for Linux-based set-top boxes. A security vulnerability exists in OpenWebif version 1.2.5, which originates from the failure of the 'CallOPKG' function of the IpkgController class in the plugin/controllers/ipkg.py file to restrict or correctly...