CVE-2013-5760 Information

Description

QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php.

Reference

https://exchange.xforce.ibmcloud.com/vulnerabilities/89117 https://www3.trustwave.com/spiderlabs/advisories/TWSL2013-029.txt