critical9.8
CVE-2018-13336
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" parameter during user crea…
Impact
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" parameter during user creation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Terra-Master | Terramaster Operating System | Version 3.1.03 |