CVE-2013-10059

CVE-2013-10059 affects D-Link DIR-615H1 routers (firmware 8.04). An authenticated OS command injection exists in the tools_vct.htm diagnostic interface via the ping_ipaddr input, allowing arbitrary shell commands through backtick encapsulation. Exploitation can occur with default credentials on t...