high8.8
CVE-2018-12316
OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST parameter.
Impact
OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Asustor | Data Master | Version 3.1.1 |