Description
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" parameter during user creation.
Unscored
CVE-2018-13336
EUVD-2018-5284GHSA-84wh-374p-jprq
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" parame…
Published Nov 27, 2018 · Updated Aug 5, 2024 · Assigned by mitre