Incorrect access control on ajaxdata.php in TerraMaster TOS version 3.1.03 allows malicious users to elevate user permissions.
terra-master terramaster operating system 3.1.03