high7.5Public exploit code
CVE-2017-13068
QNAP has already patched this vulnerability.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- QNAP HelpDesk < 1.1.12 - SQL Injection2017-10-09 · webapps · php
Impact
QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection on the application and obtain Helpdesk application information. A remote attacker does not require any privileges to successfully execute this attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qnap | Qts Helpdesk | through 1.1.12 |