A security flaw in Shanghai Xi Yu Ji Zhi Technology Minimax Code 0.5.8 allows remote attackers to perform OS command injection via manipulation of the -exec argument in the Find Command Handler component. The vendor has not responded to disclosure attempts. The vulnerability has a medium severity rating with a CVSS score of 5.5.