Unrated severityNVD Advisory· Published Nov 27, 2018· Updated Aug 5, 2024
CVE-2018-13338
CVE-2018-13338
Description
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" parameter during user creation.
Affected products
1- Range: =3.1.03
Patches
Vulnerability mechanics
References
1- blog.securityevaluators.com/vulnerabilities-in-terramaster-tos-3-1-03-fb99cf88b86amitrex_refsource_MISC
News mentions
0No linked articles in our index yet.