qnap qts helpdesk vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

QNAP has already patched this vulnerability. This security concern allows a remote malicious user to perform an SQL injection on the application and obtain Helpdesk application information. A remote attacker does not require any privileges to successfully execute this attack.

Qnap Qts Helpdesk

1 EDB exploit

9.8

CVSSv3

Command injection vulnerability in Helpdesk versions 1.1.21 and previous versions in QNAP QTS 4.2.6 build 20180531, QTS 4.3.3 build 20180528, QTS 4.3.4 build 20180528 and their earlier versions could allow remote malicious users to run arbitrary commands in the compromised applic...

Qnap Helpdesk

7.5

CVSSv3

This improper access control vulnerability in Helpdesk allows malicious users to access the system logs. To fix the vulnerability, QNAP recommend updating QTS and Helpdesk to their latest versions.

Qnap Helpdesk

9.8

CVSSv3

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this command injection vulnerability could allow remote malicious users to run arbitrary commands. This issue affects: QNAP Systems Inc. Helpdesk versions before 3.0.3.

Qnap Helpdesk

1 Github repository

9.8

CVSSv3

The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow malicious users to compromise the security of the software by gaining privileges, or reading sensitive information. This issue affects: QNA...

Qnap Helpdesk

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook