Description
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands during group creation via the "groupname" parameter.
Unscored
CVE-2018-13330
EUVD-2018-5278GHSA-2wh9-3rpj-fmj7
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands during group creatio…
Published Nov 27, 2018 · Updated Aug 5, 2024 · Assigned by mitre