CVE-2013-5667

The CVE-2013-5667 issue affects Thecus NAS server N8800 with firmware 5.03.01, where a get_userid action accepts a username containing shell metacharacters, enabling remote command execution. The vulnerability is triggered via user input parsed by the OS shell, allowing arbitrary commands to be r...

CVE-2013-5669: Undefined Security Weakness

The Thecus NAS server N8800 with firmware 5.03.01 uses cleartext credentials for administrative authentication, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2013-5668: Undefined Security Weakness

The ADS/NT Support page on the Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to discover the administrator credentials by reading this page's cleartext content...

CVE-2013-5667: Improper Neutralization of Special Elements used in an OS Command

The Thecus NAS server N8800 with firmware 5.03.01 allows remote attackers to execute arbitrary commands via a getuserid action with shell metacharacters in the username parameter...

Ubuntu Update for nas USN-1986-1

Check for the Version of nas OpenVAS Vulnerability Test $Id: gbubuntuUSN19861.nasl 8494 2018-01-23 06:57:55Z teissa $ Ubuntu Update for nas USN-1986-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you c...

Thecus N5200Pro NAS Server Control Panel RFI Vulnerability

No description provided by source. Thecus N5200Pro NAS Server Control Panel Remote File nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html ?php $htm=$REQUEST'name'; requireonce"/img/htdocs/webconfig"; requireonce"/img/www/inc/function.php"; getsysconf;...

Remote file inclusion

PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to execute arbitrary PHP code via a URL in the name parameter...

CVE-2008-0804

CVE-2008-0804 is a PHP remote file inclusion vulnerability in usrgetform.html of Thecus N5200Pro NAS Server, allowing an attacker to execute arbitrary PHP code by supplying a URL in the name parameter. The issue is remotely exploitable over the network with no authentication, and the NVD metrics ...

Thecus N5200Pro NAS Server Control Panel RFI Vulnerability

Exploit for hardware platform in category remote exploits ========================================================== Thecus N5200Pro NAS Server Control Panel RFI Vulnerability ========================================================== Thecus N5200Pro NAS Server Control Panel Remote File Include...

Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion

Thecus N5200Pro NAS Server Control Panel Remote File Ä°nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? Ä°nfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke milw0rm.com 2008-02-18...

CVE-2008-0804: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to execute arbitrary PHP code via a URL in the name parameter...