CVE-2019-12771

Thinstation shows a command-injection vulnerability (CVE-2019-12771) affecting ThinStation 6.1.1 and earlier. The flaw arises from unsafely constructed shell commands triggered by user-controlled data in the CGI endpoints cgi-bin/CdControl.cgi?action= and cgi-bin/VolControl.cgi?OK=, allowing an a...