| 标题 | Adslr NBR1005GPEV2 250814-r037c Remote code execution |
|---|
| 描述 | This vulnerability originates from send_order.cgi, where the CGI-ELF retrieves parameters from requests and concatenates them into commands using the sprintf function without any filtering, allowing remote attackers to execute arbitrary commands without authorization through command separators. |
|---|
| 来源 | ⚠️ https://www.notion.so/2a60c75766a8805a8973d2ff6a6bcb26 |
|---|
| 用户 | 2er00ne (UID 91682) |
|---|
| 提交 | 2025-11-09 16時16分 (9 月前) |
|---|
| 管理 | 2025-11-30 14時58分 (21 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 333809 [ADSLR NBR1005GPEV2 250814-r037c /send_order.cgi ap_macfilter_add mac 权限提升] |
|---|
| 积分 | 15 |
|---|