SOUND4 Impact/Pulse/First/Eco Command Injection Vulnerability in www-data-handler.php

A command injection vulnerability has been identified in SOUND4 IMPACT, FIRST, PULSE, and Eco versions through 2.x. The issue resides in the www-data-handler.php script, where the 'services' POST parameter is improperly sanitized before being passed to a system command. This vulnerability allows authenticated attackers to execute arbitrary commands on the server with www-data user privileges.

Impact

Exploitation of this vulnerability could lead to unauthorized command execution on the server, potentially allowing an attacker to manipulate system files or processes.

Reproduction

To reproduce this vulnerability, send a POST request to the www-data-handler.php script with a crafted 'services' parameter that includes the desired system command. The injected command will be executed by the server with www-data user privileges.