s1gh/quickbox-pro-2.1.8-authenticated-rceAuthenticated command injection exploit for QuickBox Pro v2.1.8, providing remote code execution as www-data and privilege escalation to root via weak sudo rules.
An authenticated low-privileged user can exploit a command injection vulnerability to get code-execution as www-data and escalate privileges to root due to weak sudo rules.
QuickBox Pro v2.1.8 and prior is vulnerable.
