An issue was discovered on the D-Link DWR-932B router. qmiweb allows command injection with ` characters.