CVE-2018-13330

PoC —

CVSS 3.0

7.2 high

EPSS

8%p94

Published

Nov 27, 2018 (Nov 27, 2018)

Modified

Jun 17, 2026

Description

System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands during group creation via the "groupname" parameter.

Vendors: terra-master
Products: terramaster operating system
Weakness: CWE-78
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.1%)

In the news0 stories

No ingested article mentions this CVE yet.