← back
CVE-2018-0715

CVE-2018-0715

EPSS 3.1%
Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inject Javascript code in the compromised application.
Affected products
QNAP · Photo Station
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/45348/unverifiedexploitdbwww.exploit-db.com/exploits/45348unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://www.exploit-db.com/exploits/45348/https://www.qnap.com/zh-tw/security-advisory/nas-201808-23