Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
terra-master terramaster operating system 3.1.03 vulnerabilities and exploits
(subscribe to this query)
9
CVSSv2
CVE-2018-13353
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows malicious users to execute commands via the "checkport" parameter.
Terra-master Terramaster Operating System 3.1.03
9
CVSSv2
CVE-2018-13330
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows malicious users to execute system commands during group creation via the "groupname" parameter.
Terra-master Terramaster Operating System 3.1.03
10
CVSSv2
CVE-2018-13336
System command injection in ajaxdata.php in TerraMaster TOS version 3.1.03 allows malicious users to execute system commands via the "pwd" parameter during user creation.
Terra-master Terramaster Operating System 3.1.03
4.3
CVSSv2
CVE-2018-13349
Cross-site scripting in the web application taskbar in TerraMaster TOS version 3.1.03 allows malicious users to execute JavaScript via the user's username.
Terra-master Terramaster Operating System 3.1.03
3.5
CVSSv2
CVE-2018-13351
Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows malicious users to execute JavaScript via the edit password form.
Terra-master Terramaster Operating System 3.1.03
5
CVSSv2
CVE-2018-13352
Session Exposure in the web application for TerraMaster TOS version 3.1.03 allows malicious users to view active session tokens in a world-readable directory.
Terra-master Terramaster Operating System 3.1.03
4
CVSSv2
CVE-2018-13355
Incorrect access controls in ajaxdata.php in TerraMaster TOS version 3.1.03 allow malicious users to create user groups without proper authorization.
Terra-master Terramaster Operating System 3.1.03
3.5
CVSSv2
CVE-2018-13357
Cross-site scripting in Control Panel in TerraMaster TOS version 3.1.03 allows malicious users to execute JavaScript when viewing Shared Folders via JavaScript in Shared Folders' names.
Terra-master Terramaster Operating System 3.1.03
4.3
CVSSv2
CVE-2018-13360
Cross-site scripting in Text Editor in TerraMaster TOS version 3.1.03 allows malicious users to execute JavaScript via the "filename" URL parameter.
Terra-master Terramaster Operating System 3.1.03
9
CVSSv2
CVE-2018-13418
System command injection in ajaxdata.php in TerraMaster TOS 3.1.03 allows malicious users to execute system commands via the "newname" parameter.
Terra-master Terramaster Operating System 3.1.03
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTI
CVE-2024-35863
CVE-2024-35910
man-in-the-middle
CVE-2024-35912
CVE-2024-25742
LFI
CVE-2024-32002
CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »
Vulmon