Vendor
An unauthenticated blind command injection vulnerability in the DroboAccess v2.1 enable_user function allows remote attackers to execute arbitrary shell commands via the username parameter.