PT-2018-11760
CVE-2018-13336
·
تاريخ النشر
2018-11-27
·
تاريخ التحديث
2019-10-03
الوصف من
CVSS 2.0
10
حرجةالمقاييسAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
TerraMaster TOS version 3.1.03
Description
The issue concerns system command injection in the ajaxdata.php file, allowing attackers to execute system commands. This is achieved via the
pwd parameter during the user creation process.Recommendations
For TerraMaster TOS version 3.1.03, avoid using the
pwd parameter in the ajaxdata.php file during user creation until a patch is available. As a temporary workaround, consider restricting access to the user creation functionality to minimize the risk of exploitation. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾