Unauthenticated Remote Command injection as root occurs in the Western Digital MyCloud NAS 2.11.142 /web/google_analytics.php URL via a modified arg parameter in the POST data.
Log in to view the POC file snapshot cached by Shenlong Bot
Log in to view