TerraMaster TOS Cross-Site Scripting Vulnerability (CNVD-2019-00662)

TerraMaster TOS is a set of storage server special operating system based on Linux platform developed by Terra Master. The system supports file sharing, cloud data synchronization, data backup and virtualization. A cross-site scripting vulnerability exists in the ajaxdata.php endpoint in...

CVE-2018-13329

Cross-site scripting in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "lines" URL parameter...

PT-2018-11753

Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue allows attackers to execute JavaScript code via the lines URL parameter in the ajaxdata.php file, potentially leading to cross-site scripting attacks. Recommendations For TerraMaster TOS...