Unrated severityNVD Advisory· Published Nov 27, 2018· Updated Aug 5, 2024
CVE-2018-13336
CVE-2018-13336
Description
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" parameter during user creation.
Affected products
1- Range: = 3.1.03
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86amitrex_refsource_MISC
News mentions
0No linked articles in our index yet.