Bash implementation of IPFire 2.19 RCE PoC.
For versions of IPFire before 2.19 with core update 110, there's a RCE vulnerability in "ids.cgi" via the OINKCODE parameter. This vulnerability can be exploited by authenticated users.
For more information check CVE-2017-9757