CVE-2021-38556

Description

includes/configure_client.php in RaspAP 2.6.6 allows attackers to execute commands via command injection.

Affected Platforms

Weakness Type

CWE-77

References

• https://github.com/RaspAP/raspap-webgui
• https://github.com/RaspAP/raspap-webgui/blob/0e1d652c5e55f812aaf2a5908884e9db179…
• https://zerosecuritypenetrationtesting.com/?page_id=306
• https://github.com/RaspAP/raspap-webgui
• https://github.com/RaspAP/raspap-webgui/blob/0e1d652c5e55f812aaf2a5908884e9db179…
• https://zerosecuritypenetrationtesting.com/?page_id=306