Remote Code Execution Vulnerability in TerraMaster TOS before 3.0.34 via Shell Metacharacter Injection in GetTest.php

Remote Code Execution Vulnerability in TerraMaster TOS before 3.0.34 via Shell Metacharacter Injection in GetTest.php

CVE-2017-9328 · HIGH Severity

AV:N/AC:L/AU:N/C:C/I:C/A:C

Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root.

Learn more about our Web Application Penetration Testing UK.