Lin Xinkang

A command injection issue exists in the /usr/www/res.php file, allowing attackers to execute arbitrary commands by manipulating the `value` parameter.

The issue is related to Directory Traversal due to improper access restriction, allowing an unauthenticated, remote attacker to obtain arbitrary sensitive file contents by uploading a specially crafted symbolic link file.