qinming99 dst-admin Command Injection Vulnerability in revertBackup Function

A command injection vulnerability has been identified in qinming99 dst-admin versions through 1.5.0. The issue arises in the revertBackup function within the file /home/restore, where user-controlled input is improperly sanitized, allowing attackers to inject arbitrary shell commands. This vulnerability can be exploited remotely, with public proof-of-concept exploits available.

Impact

Exploitation of this vulnerability allows for arbitrary command execution on the server, potentially leading to a complete server compromise.