Information disclosure in Qnap Photo Station
CVE-2013-5760
QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php.
Vulnerability class: Information Disclosure
EPSS: 0.013 (66.7th percentile) — read the EPSS interpretation.
Affected products
- Qnap Photo_station
- Qnap Photo_station_firmware
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (Exploit, x_refsource_MISC)
Frequently asked questions
- What is CVE-2013-5760?
- CVE-2013-5760 is a vulnerability in Qnap Photo Station, classified under Information Disclosure. Published 2014-06-09.
- Is CVE-2013-5760 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.