Remote Code Execution Vulnerability in TerraMaster TOS before 3.0.34 via Shell Metacharacter Injection in GetTest.php

CVE-2017-9328

Shell metacharacter injection vulnerability in /usr/www/include/ajax/GetTest.php in TerraMaster TOS before 3.0.34 leads to remote code execution as root.

Learn more about our Web Application Penetration Testing UK.