Security advisory: Authenticated RCE (command injection) in Kerio Connect 10.0.9 Patch 2 (build 10320) (GFI Software)

<p>Posted by disclosure via Fulldisclosure on Aug 17</p>0day Rubbish Research Team is publicly disclosing a vulnerability in Kerio Connect 10.0.9 Patch 2 (build 10320) (GFI <br /> Software). The research is published and a proof-of-concept is available.<br /> <br /> Authenticated RCE (command injection) (CVSS 8.8, authenticated)<br /> <br /> Kerio Connect 10.0.9 Patch 2 contains a command-injectio