CVE-2010-20059 | iXsystems FreeNAS up to 0.7.2 Web Interface exec_raw.php cmd os command injection (Exploit 16313)

A vulnerability classified as critical was found in iXsystems FreeNAS up to 0.7.2. The affected element is an unknown function of the file exec_raw.php of the component Web Interface. Such manipulation of the argument cmd leads to os command injection.

This vulnerability is referenced as CVE-2010-20059. It is possible to launch the attack remotely. Furthermore, an exploit is available.