TerraMaster TOS - GetTest.php RCE Detection (CVE-2017-9328)

Detects CVE-2017-9328 by injecting a PHP webshell write via /include/ajax/GetTest.php and executing id. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS GetTest.php unauthenticated RCE CVE-2017-9328.""" import re from kittysploit import from lib.protocols.http.httpclient import...

TerraMaster TOS - GetTest.php RCE (CVE-2017-9328)

Exploits command injection in TerraMaster /include/ajax/GetTest.php to drop a PHP shell and open an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS GetTest.php RCE CVE-2017-9328 — opens execute session.""" import re from kittysploit import from...

TerraMaster TOS shell metacharacter injection vulnerability

TerraMaster TOS is a set of storage server special operating system based on Linux platform developed by Terra Master. The system supports file sharing, cloud data synchronization, data backup and virtualization. A security vulnerability exists in the /usr/www/include/ajax/GetTest.php file in...

CVE-2017-9328

Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root...

CVE-2017-9328: Improper Neutralization of Special Elements used in an OS Command

Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root...

PT-2017-18845

Name of the Vulnerable Software and Affected Versions TerraMaster TOS versions prior to 3.0.34 Description A Shell metacharacter injection issue in the /usr/www/include/ajax/GetTest.php file allows for remote code execution as root. Recommendations For versions prior to 3.0.34, update to version...