high8.8
CVE-2018-13358
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "checkName" parameter.
Impact
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "checkName" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Terra-Master | Terramaster Operating System | Version 3.1.03 |