Description
MiniDVBLinux 5.4 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary commands as root through the 'command' GET parameter. Attackers can exploit the /tpl/commands.sh endpoint by sending malicious command values to gain root-level system access.
References
https://packetstormsecurity.com/files/168749/
Third Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5718.php
ExploitThird Party Advisory
https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5718.php
ExploitThird Party Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 · Critical
Information
Source identifier
Vulnerability status
Modified
Published
2025-12-30T23:15:43.620Z
3 weeks agoLast modified
2026-01-12T14:16:00.837Z
1 week ago