59 matches found
Cross site scripting
Cross-site scripting in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "lines" URL parameter...
CVE-2018-13355: Incorrect Permission Assignment for Critical Resource
Incorrect access controls in ajaxdata.php in TerraMaster TOS version 3.1.03 allow attackers to create user groups without proper authorization...
PT-2018-11754
Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue allows attackers to execute system commands during group creation. This is achieved via the groupname parameter in the "ajaxdata.php" file. Recommendations For TerraMaster TOS version 3.1.03...
PT-2018-11778
Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue concerns system command injection in the ajaxdata.php file, allowing attackers to execute system commands. This is achieved via the checkName parameter. Recommendations For TerraMaster TOS...
CVE-2018-13336: Improper Neutralization of Special Elements used in an OS Command
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "pwd" parameter during user creation...
PT-2018-11773
Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue concerns system command injection in the ajaxdata.php file, allowing attackers to execute commands by manipulating the checkport parameter. Recommendations For TerraMaster TOS version 3.1.03...
CVE-2018-13338: Improper Neutralization of Special Elements used in an OS Command
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "username" parameter during user creation...
PT-2018-11776
Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue is related to incorrect access control on the ajaxdata.php file, which allows attackers to elevate user permissions. Recommendations For TerraMaster TOS version 3.1.03, update to a version...
CVE-2018-13353: Improper Neutralization of Special Elements used in an OS Command
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute commands via the "checkport" parameter...
CVE-2018-13329: Improper Neutralization of Input During Web Page Generation
Cross-site scripting in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "lines" URL parameter...
PT-2018-11812
Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue allows attackers to execute system commands via the newname parameter in the "ajaxdata.php" file. Recommendations For TerraMaster TOS version 3.1.03, avoid using the newname parameter in the...
PT-2018-11762
Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue concerns system command injection in the ajaxdata.php file, allowing attackers to execute system commands. This is achieved via the username parameter during the user creation process...
CVE-2018-13358: Improper Neutralization of Special Elements used in an OS Command
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands via the "checkName" parameter...
CVE-2018-13418: Improper Neutralization of Special Elements used in an OS Command
System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows attackers to execute system commands via the "newname" parameter...
PT-2018-11760
Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue concerns system command injection in the ajaxdata.php file, allowing attackers to execute system commands. This is achieved via the pwd parameter during the user creation process...
PT-2018-11753
Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue allows attackers to execute JavaScript code via the lines URL parameter in the ajaxdata.php file, potentially leading to cross-site scripting attacks. Recommendations For TerraMaster TOS...
PT-2018-11775
Name of the Vulnerable Software and Affected Versions TerraMaster TOS version 3.1.03 Description The issue is related to incorrect access controls in the ajaxdata.php file, which allows attackers to create user groups without proper authorization. Recommendations For TerraMaster TOS version 3.1.0...
CVE-2018-13330: Improper Neutralization of Special Elements used in an OS Command
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute system commands during group creation via the "groupname" parameter...