Exploit QNAP VioStor NVR / QNAP NAS - Remote Code Execution

[Exploiter]

EDB-ID

38550

Проверка EDB

1. Пройдено

Автор

TIM HERRES

Тип уязвимости

WEBAPPS

Платформа

CGI

CVE

cve-2013-0143

Дата публикации

2013-06-05

QNAP VioStor NVR / QNAP NAS - Remote Code Execution

source: https://www.securityfocus.com/bid/60354/info

QNAP VioStor NVR and QNAP NAS are prone to a remote code-execution vulnerability.

Successfully exploiting this issue may allow an attacker to execute arbitrary code with elevated privileges in the context of the user running the affected application.

The following are vulnerable:

QNAP VioStor NVR running firmware 4.0.3.
QNAP NAS 

http://www.example.com/cgi-bin/pingping.cgi?ping_ip=1;whoami