CVE-2017-9328 Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root.
CriticalCVSS 9.8
EPSS 7.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| terra-master terramaster operating system | <= 3.0.33 | No fix listed |
References
- gist.github.com exploit third-party-advisory