342 matches found
ASUSTOR ADM OS Command Injection Vulnerability (CNVD-2018-25181)
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An operating system command injection vulnerability exists in the upload.cgi file in ASUSTOR ADM version 3.1.1. An attacker can exploit this vulnerability by modifying the 'filename' POST parameter to execut...
ASUSTOR ADM cross-site scripting vulnerability (CNVD-2018-26928)
ASUSTOR ADM is a set of operating systems from ASUSTOR dedicated to ASUSTOR NAS storage devices.File Explorer is one of the file browsers. A cross-site scripting vulnerability exists in File Explorer in ASUSTOR ADM version 3.1.1, which can be exploited by remote attackers to execute JavaScript co...
ASUSTOR ADM OS Command Injection Vulnerability (CNVD-2018-26932)
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An operating system command injection vulnerability exists in the user.cgi file in ASUSTOR ADM version 3.1.1, which can be exploited to execute system commands with root privileges using the 'secretkey' URL...
ASUSTOR ADM File Explorer Cross-Site Scripting Vulnerability
ASUSTOR ADM is a set of operating systems from ASUSTOR dedicated to ASUSTOR NAS storage devices.File Explorer is one of the file browsers. A cross-site scripting vulnerability exists in File Explorer in ASUSTOR ADM version 3.1.1. A remote attacker can exploit this vulnerability to execute arbitra...
ASUSTOR ADM Denial of Service Vulnerability
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. A denial of service vulnerability exists in the login page of ASUSTOR ADM version 3.1.1, which can be exploited to prevent users from logging in by placing malformed text in the login page name...
ASUSTOR ADM Information Disclosure Vulnerability (CNVD-2018-26926)
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An information disclosure vulnerability exists in the share.cgi file in ASUSTOR ADM version 3.1.1, which can be exploited by an attacker to obtain a key with the help of the 'encryptkey' URL parameter...
ASUSTOR ADM Password Reset Vulnerability
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. A password reset vulnerability exists in ASUSTOR ADM version 3.1.1, which is caused by the program failing to validate the password, and can be exploited by an attacker to change the account password without...
ASUSTOR ADM path traversal vulnerability (CNVD-2018-25039)
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. A directory traversal vulnerability exists in the upload.cgi file in ASUSTOR ADM version 3.1.1. An attacker can exploit this vulnerability by modifying the 'path' URL parameter to upload a file to an arbitra...
ASUSTOR ADM < 3.1.3.RHU2 Multiple Vulnerabilities - Active Check
ASUSTOR ADM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:asustor:adm"; if description...
ASUSTOR ADM OS Command Injection Vulnerability (CNVD-2018-25177)
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An operating system command injection vulnerability exists in the snmp.cgi file in ASUSTOR ADM version 3.1.1. The vulnerability can be exploited to execute system commands without authentication using the...
ASUSTOR ADM Path Traversal Vulnerability
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. A directory traversal vulnerability exists in the downloadwallpaper.cgi file in ASUSTOR ADM version 3.1.1. An attacker can exploit this vulnerability by manipulating the 'file' and 'folder' URL parameters to...
ASUSTOR ADM Cross-Site Scripting Vulnerability
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. A cross-site scripting vulnerability exists in the login page of ASUSTOR ADM version 3.1.1. A remote attacker can exploit this vulnerability to execute JavaScript code via the System Announcement feature...
ASUSTOR ADM Operating System Command Injection Vulnerability
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An operating system command injection vulnerability exists in the group.cgi file in ASUSTOR ADM version 3.1.1. An attacker can exploit this vulnerability by modifying the 'name' POST parameter to execute...
ASUSTOR ADM Information Disclosure Vulnerability
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An information disclosure vulnerability exists in the SNMP settings page in ASUSTOR ADM version 3.1.1, which can be exploited by an attacker to obtain SNMP passwords in plaintext...
ASUSTOR ADM OS Command Injection Vulnerability (CNVD-2018-26927)
ASUSTOR ADM is an operating system from ASUSTOR dedicated to ASUSTOR NAS storage devices. An operating system command injection vulnerability exists in the user.cgi file in ASUSTOR ADM version 3.1.1, which can be exploited to execute system commands with the help of the 'name' POST parameter...
CVE-2018-12310
Cross-site scripting in the Login page in ASUSTOR ADM version 3.1.1 allows attackers to execute JavaScript via the System Announcement feature...
Command injection
OS command injection in user.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands as root via the "secretkey" URL parameter...
Command injection
OS Command Injection in upload.cgi in ASUSTOR ADM version 3.1.1 allows attackers to execute system commands by modifying the filename POST parameter...
