CVE-2020-36195

CVE-2020-36195 is a SQL injection affecting QNAP NAS, specifically Multimedia Console and the Media Streaming Add-on. The vulnerability can lead to information disclosure without authentication over the network. Affected versions and fixes per sources: QTS 4.3.3: Media Streaming add-on 430.1.8.10...

CVE-2020-36195 SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...

PT-2021-4453

Name of the Vulnerable Software and Affected Versions QNAP NAS versions prior to QTS 4.3.3.1624 Build 20210416 QNAP NAS versions prior to QTS 4.3.6.1620 Build 20210322 QNAP NAS Multimedia Console versions prior to 1.3.4 QNAP NAS Media Streaming add-on versions prior to 430.1.8.8 QNAP NAS Media...

CVE-2020-36195: Improper Input Validation

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...

Qnap Systems QNAP NAS running Multimedia Console SQL注入漏洞

Qnap Systems QNAP NAS running Multimedia Console is an application from China Weilian Qnap Systems. A multimedia console. A security vulnerability exists in QNAP NAS running Multimedia Console, which can be exploited by an attacker to obtain application information...

CVE-2020-36195

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedi...

CVE-2020-2493

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later...

Cross site scripting

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later...

CVE-2020-2493

CVE-2020-2493 is an XSS vulnerability in QNAP’s Multimedia Console that allows remote attackers to inject malicious code. The issue affects the Multimedia Console component and has been fixed in Multimedia Console 1.1.5 and later (per QNAP advisory QSA-20-14). The CVE is documented across multipl...

CVE-2020-2493 Cross-site Scripting Vulnerability in Multimedia Console

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later...

PT-2020-15861

Name of the Vulnerable Software and Affected Versions Multimedia Console versions prior to 1.1.5 Description This issue allows remote attackers to inject malicious code through a cross-site scripting vulnerability in Multimedia Console. Recommendations For versions prior to 1.1.5, update to...

CVE-2020-2493: Improper Neutralization of Input During Web Page Generation

This cross-site scripting vulnerability in Multimedia Console allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in Multimedia Console 1.1.5 and later...

QNAP High-Severity Flaws Plague NAS Systems

QNAP Systems is warning of high-severity flaws that plague its top-selling network attached storage NAS devices. If exploited, the most severe of the flaws could allow attackers to remotely take over NAS devices. NAS devices are systems that consist of one or more hard drives that are constantly...