Vaelsys V4 command injection vulnerability

Vaelsys V4 is an artificial intelligence video analytics platform from Vaelsys, Spain. A command injection vulnerability exists in Vaelsys V4 version 4.1.0, which stems from the incorrect operation of the parameter xajaxargs in the file /grid/vgridserver.php resulting in os command injection...