PT-2018-13166

Name of the Vulnerable Software and Affected Versions NUUO NVRMini2 version 3.9.1 Description The issue allows for authenticated remote command injection. An attacker can send crafted requests to the "upgrade handle.php" endpoint to execute OS commands as root. Recommendations For NUUO NVRMini2...