Security Advisory

CVE-2018-13306

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-11-27 21:00:00

Last updated 2024-08-05 09:00:35

Assigner mitre

CVSS score not scored

State PUBLISHED

System command injection in formDlna in TOTOLINK A3002RU version 1.0.8 allows attackers to execute system commands via the "ftpUser" POST parameter.