opendreambox Operating System Command Injection Vulnerability

opendreambox is a set of embedded Linux system build framework. webadmin plugin is one of the web management plugin. An operating system command injection vulnerability exists in the enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py file of the webadmin plugin in version 2.0.0 of...

CVE-2017-14135

enigma2-plugins/blob/master/webadmin/src/WebChilds/Script.py in the webadmin plugin for opendreambox 2.0.0 allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the /script URI...

PT-2017-2824

Name of the Vulnerable Software and Affected Versions opendreambox version 2.0.0 Description The issue allows remote attackers to execute arbitrary OS commands via shell metacharacters in the command parameter to the "/script" URI. This is due to the lack of neutralization of special elements use...

OpenDreamBox 2.0.0 Remote Code Execution

Exploit Title: OpenDreamBox 2.0.0 - Plugin WebAdmin RCE Shodan Dork: "DreamBox" 200 ok" Date: 07/03/17 Exploit Author: Jonatas Fil Vendor Homepage: https://www.dreamboxupdate.com Software Link: https://www.dreamboxupdate.com/opendreambox/2.0.0 Version: 2.0.0 Vulnerabilty: Remote Command Execution...