The vulnerability of the Search.cgi?action=cgi_query component of the Avtech digital video recorder software allows a hacker to execute arbitrary code.

The vulnerability of the Search.cgi?action=cgiquery component of the Avtech digital video recorder software lies in insufficient validation of input data when processing parameters such as username or queryb64str. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...