Full title: Vinchin Backup And Recovery 7.2 syncNtpTime Command Injection Vulnerability Category: web applications Platform: php Vinchin Backup and Recovery versions 7.2 and below suffer from a command injection vulnerability in the syncNtpTime function. # 0day.today @ http://0day.today/