Description
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" parameter during user creation.
Unscored
CVE-2018-13338
EUVD-2018-5286GHSA-qgmv-c6q2-fvh6
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" p…
Published Nov 27, 2018 · Updated Aug 5, 2024 · Assigned by mitre