A single crafted request to a login page. That is all it takes for an unauthenticated attacker to gain full root control of a ...