QNAP-NAS CVE-2022-27596 恶意代码注入漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.secrss.com/articles/51499
• https://blog.nsfocus.net/qnap-qtsquts-hero-sqlcve-2022-27596/
• https://www.anquanke.com/post/id/286033
• https://zhuanlan.zhihu.com/p/603961121
• https://www.ithome.com.tw/news/155326
• https://cert.360.cn/warning/detail?id=0421de226241da8d7d532f20f77c27ad
• https://cn-sec.com/archives/1530799.html
• https://cn-sec.com/archives/1532522.html
• https://wlxx.sou.edu.cn/2023/0216/c8721a88522/page.htm
• https://blog.csdn.net/qq_29607687/article/details/151025324

Related Vulnerabilities

• QNAP NAS 远程命令执行漏洞(CVE-2022-27596)
• QNAP-NAS V4.3 photostation文件-反射型XSS(CVE-2018-19956)