Security Advisory
CVE-2018-13336
9.8
CRITICAL
Vulnerability Description
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" parameter during user creation.
Published Date
November 27, 2018
Official Source
NIST NVD Advisory