thumb.php Script Arbitrary Command Execution

The vulnerability of the thumb.php script implementation in the thumb module of the “Smart Home” MajorDoMo platform is related to the lack of measures taken at the control level to clean data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...