Unscored CVE-2013-7174 EUVD-2013-6957GHSA-8xv2-6qw9-7w72

Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitrary files via a full…

Published Jan 9, 2014 · Updated Aug 6, 2024 · Assigned by certcc

Description

Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote attackers to read arbitrary files via a full pathname in the f parameter.

References

VU#487078 third-party-advisory
64719 vdb-entry
1029577 vdb-entry