Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qfc7-8j94-8m53

Опубликовано: 05 мая 2022
Источник: github
Github: Не прошло ревью

Описание

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.

EPSS

Процентиль: 91%
0.07179
Низкий

Дефекты

CWE-94

Связанные уязвимости

nvd
больше 12 лет назад

cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.

EPSS

Процентиль: 91%
0.07179
Низкий

Дефекты

CWE-94