The unknown exploit targets the login CGI script, where a key parameter is not properly sanitized leading to a command injection. Signed-off-by: GwanYeong Kim <gy741.kim@gmail.com>