D-Link’s various products have command injection vulnerabilities

D-Link DNS-325 and others are a NAS Network Attached Storage device from China's D-Link Corporation. A command injection vulnerability exists in various D-Link products, which originates from a command injection flaw in the fakey parameter of the cgis3 function in the /cgi-bin/s3.cgi file. The...