CVE-2018-0716

CVE-2018-0716 is a cross-site scripting vulnerability affecting QNAP QTS components, notably QTS 4.2.6 build 20180711 and QTS 4.3.x series (Qsync Central 3.0.2–3.0.4 and earlier). The underlying issue allows remote attackers to inject JavaScript in the compromised application. The connected docum...

PT-2018-9035

Name of the Vulnerable Software and Affected Versions QTS versions prior to 4.3.5 Qsync Central versions prior to 3.0.4 Description A cross-site scripting issue allows remote attackers to inject Javascript code into the compromised application. Recommendations For QTS versions prior to 4.3.5,...

CVE-2018-0716: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application...