D-Link DIR-816 A2 1.10 B05 was discovered to contain multiple command injection vulnerabilities via the admuser and admpass parameters at /goform/setSysAdm.Referenceshttps://www.dlink.com/en/security-bulletin/https://github.com/hunzi0/VulInfo/tree/main/D-Link/DIR-816/setSysAdm
