Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2013-5760 Details

QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
https://exchange.xforce.ibmcloud.com/vulnerabilities/89117	CVE
https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-029.txt	CVE	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/89117	[email protected]
https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-029.txt	[email protected]	Exploit

CWE-ID	CWE Name	Source
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	[email protected]

Product	Versions
qnap photo station firmware	<= 4.0.3
CPE cpe:2.3:o:qnap:photo_station_firmware:::::::: Remediation No remediation found in references.
qnap photo station	All versions
CPE cpe:2.3:h:qnap:photo_station:-:::::::* Remediation No remediation found in references.

6 change records found show changes

QUICK INFO