high8.8
CVE-2018-13418
System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter.
Impact
System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Terra-Master | Terramaster Operating System | Version 3.1.03 |