CVE-2015-6912: Improper Neutralization of Special Elements used in a Command

Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitlecodepage parameter to subtitle.cgi...