Vulnerabilities > Terra Master > Terramaster Operating System > Medium

DATE CVE VULNERABILITY TITLE RISK
2018-11-27 CVE-2018-13334 Cross-site Scripting vulnerability in Terra-Master Terramaster Operating System 3.1.03
Cross-site scripting in handle.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "options[sysname]" parameter.
4.3
2018-11-27 CVE-2018-13329 Cross-site Scripting vulnerability in Terra-Master Terramaster Operating System 3.1.03
Cross-site scripting in ajaxdata.php in TerraMaster TOS version 3.1.03 allows attackers to execute JavaScript via the "lines" URL parameter.
4.3