QNAP VioStor NVR / QNAP NAS – Remote Code Execution

• Exploit Database
• 120 阅读

• 作者： Tim Herres
  日期： 2013-06-05
• 类别：

  • webapps
  平台：

  • cgi
• 来源：https://www.exploit-db.com/exploits/38550/
• 1 2 3 4 5 6 7 8 9 10 11 12 13

  source: https://www.securityfocus.com/bid/60354/info   QNAP VioStor NVR and QNAP NAS are prone to a remote code-execution vulnerability.   Successfully exploiting this issue may allow an attacker to execute arbitrary code with elevated privileges in the context of the user running the affected application.   The following are vulnerable:   QNAP VioStor NVR running firmware 4.0.3. QNAP NAS   http://www.example.com/cgi-bin/pingping.cgi?ping_ip=1;whoami