Command injection made easy: you can simply append a system command to a certain router URL...and the router will run it for you.