ID:5093 - Exploit for OS Command Injection in OpenLiteSpeed

Link to public exploit:

Vulnerability description

The vulnerability allows a remote user to execute arbitrary shell commands on the target system.

The vulnerability exists due to improper input validation passed to the "/view/confMgr.php" script. A remote administrator can pass specially crafted data to the application and execute arbitrary OS commands on the target system.

Remediation