CVE-2019-7192
🗓️ 05 Dec 2019 16:17:29Reported by qnapType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 1276 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 37 |
|---|---|---|---|---|
 | QNAP QTS And Photo Station 6.0.3 - Remote Command Execution | 30 May 202014:56 | – | 0daydb |
 | QNAP QTS and Photo Station 6.0.3 - Remote Command Execution Exploit | 29 May 202000:00 | – | zdt |
 | Exploit for Incorrect Authorization in Qnap Photo_Station | 21 May 202009:14 | – | githubexploit |
| Exploit for Incorrect Authorization in Qnap Photo_Station | 24 May 202015:44 | – | githubexploit |
 | People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices | 10 Jun 202212:00 | – | ics |
 | CVE-2019-7192 | 5 Dec 201900:00 | – | attackerkb |
 | Photo Station Privilege Bypass | 7 Sep 202100:00 | – | bdu_fstec |
 | CVE-2019-7192 | 20 May 202014:15 | – | circl |
 | QNAP Photo Station Improper Access Control Vulnerability | 8 Jun 202200:00 | – | cisa_kev |
 | QNAP Systems Photo Station Access Control Error Vulnerability | 6 Dec 201900:00 | – | cnvd |
10
Node
AND
Node
AND
Node
AND
Node
AND
[
{
"product": "QNAP NAS devices running Photo Station",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "QTS 4.4.1: Photo Station before version 6.0.3, QTS 4.3.4 - QTS 4.4.0: Photo Station before version 5.7.10, QTS 4.3.0 - QTS 4.3.3: Photo Station before version 5.4.9, QTS 4.2.6: Photo Station before version 5.2.11"
}
]
}
]| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| a | request body | /p/api/album.php | Path traversal via album creation to trigger slideshow and obtain access code (CVE-2019-7192) as part of QNAP Photo Station path traversal | CWE-863 |
| f | request body | /p/api/album.php | Path traversal via album creation to trigger slideshow and obtain access code (CVE-2019-7192) as part of QNAP Photo Station path traversal | CWE-863 |
| album | query param | /slideshow.php | Access code acquisition by loading the created slideshow album (uses album id in query) | CWE-863 |
| album | request body | /p/api/video.php | Filename traversal to read /etc/passwd via video.php using crafted filename parameter | CWE-863 |
| a | request body | /p/api/video.php | Filename traversal to read /etc/passwd via video.php using crafted filename parameter | CWE-863 |
| ac | request body | /p/api/video.php | Filename traversal to read /etc/passwd via video.php using crafted filename parameter | CWE-863 |
| filename | request body | /p/api/video.php | Filename traversal to read /etc/passwd via video.php using crafted filename parameter | CWE-863 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 02:40Current
9.4Critical risk
Vulners AI Score9.4
CVSS 27.5
CVSS 3.19.8
EPSS0.88102
SSVC