QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php.
References
Configurations
Configuration 1 (hide)
AND |
|
History
21 Nov 2024, 01:58
Type | Values Removed | Values Added |
---|---|---|
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/89117 - | |
References | () https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-029.txt - Exploit |
Information
Published : 2014-06-09 19:55
Updated : 2024-11-21 01:58
NVD link : CVE-2013-5760
Mitre link : CVE-2013-5760
CVE.ORG link : CVE-2013-5760
JSON object : View
Products Affected
qnap
- photo_station_firmware
- photo_station
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor