Description
System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter.
Unscored
CVE-2018-13418
EUVD-2018-5361GHSA-prq8-gg7f-88gv
System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter.
Published Nov 27, 2018 · Updated Aug 5, 2024 · Assigned by mitre