CVE-2013-5760

QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2014-06-09

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Photo Station (Qnap)
• Photo Station Firmware (Qnap)

References

• https://exchange.xforce.ibmcloud.com/vulnerabilities/89117
• https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-029.txt