CVE-2013-7174 in QNAP QTS
Summary
Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitrary files via a full pathname in the f parameter.
Reservation
12/19/2013
Disclosure
01/09/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 11781 | QNAP QTS Web jc.cgi path traversal | 22 | Proof-of-Concept | Official fix | CVE-2013-7174 |