critical9.8
CVE-2018-13354
System command injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "Event" parameter.
Impact
System command injection in logtable.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "Event" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Terra-Master | Terramaster Operating System | Version 3.1.03 |