The vulnerability of the setUnloadUserData() function in the script/cgi-bin/cstecgi.cgi of the TOTOLINK A7000R router’s microprogramming system allows a malicious user to execute arbitrary commands.

The vulnerability of the setUnloadUserData function in the /cgi-bin/cstecgi.cgi script of the TOTOLINK A7000R router’s microprogramming system is related to the lack of measures taken at the control level during the processing of the pluginname parameter. Exploiting this vulnerability allows an...

TOTOLINK N300RH 注入漏洞

TOTOLINK N300RH is a long range wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK N300RH suffers from a command injection vulnerability that stems from the parameter pluginname in the file /cgi-bin/cstecgi.cgi failing to correctly filter constructed command special characters,...