medium5.0
CVE-2013-5760
QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php.
Impact
QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnap | Photo Station Firmware | through 4.0.3 |
| Qnap | Photo Station | All versions |