critical9.8
CVE-2018-13338
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" parameter during user…
Impact
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" parameter during user creation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Terra-Master | Terramaster Operating System | Version 3.1.03 |