Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2018-19952
PUBLISHED
More InfoOfficial Page
Assigner-qnap
Assigner Org ID-2fd009eb-170a-4625-932b-17a53af1051f
View Known Exploited Vulnerability (KEV) details
Published At-02 Nov, 2020 | 15:57
Updated At-17 Sep, 2024 | 02:58
Rejected At-
▼CVE Numbering Authority (CNA)

If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.

Affected Products
Vendor
QNAP Systems, Inc.QNAP Systems Inc.
Product
Music Station
Versions
Affected
  • From unspecified before 5.1.13 (custom)
  • From unspecified before 5.2.9 (custom)
  • From unspecified before 5.3.11 (custom)
Problem Types
TypeCWE IDDescription
CWECWE-20CWE-20 Improper Input Validation
CWECWE-80CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CWECWE-943CWE-943 Improper Neutralization of Special Elements in Data Query Logic
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions

QNAP have already fixed the issue in the following Music Station: QTS 4.3.3: Music Station 5.1.13 and later QTS 4.3.4: Music Station 5.1.13 and later QTS 4.3.6: Music Station 5.2.9 and later QTS 4.4.3: Music Station 5.3.11 and later

Configurations
Workarounds
Exploits
Credits
Independent Security Evaluators
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.qnap.com/en/security-advisory/qsa-20-10
x_refsource_MISC
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
https://www.qnap.com/en/security-advisory/qsa-20-10
x_refsource_MISC
x_transferred
Details not found