QuickBox-Pro-2.1.8-Authenticated-RCE

An authenticated low-privileged user can exploit a command injection vulnerability to get code-execution as www-data and escalate privileges to root due to weak sudo rules.

QuickBox Pro v2.1.8 and prior is vulnerable.