OS Command Injection via /htdocs/web/diagnostic.php in D-Link DAP1160L A1 Firmware

An OS command injection vulnerability in the /htdocs/web/diagnostic.php endpoint of D-Link DAP1160L A1_FW101WWb04 allows attackers to execute arbitrary commands via injecting arbitrary shell metacharacters.