PT-2014-2955

Name of the Vulnerable Software and Affected Versions QNAP Photo Station versions prior to 4.0.3 build0912 Description The issue allows remote attackers to list OS user accounts via a request to "photo/p/api/list.php". Recommendations For versions prior to 4.0.3 build0912, update to firmware 4.0....

CVE-2013-5760: Exposure of Sensitive Information to an Unauthorized Actor

QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php...