7.8
CVSSv2

CVE-2013-7174

Published: 09/01/2014 Updated: 31/12/2016
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 694
Vector: AV:N/AC:L/Au:N/C:C/I:N/A:N

Vulnerability Summary

Absolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS prior to 4.1.0 allows remote malicious users to read arbitrary files via a full pathname in the f parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

qnap qts

qnap qts 4.0