Description
QNAP Systems Photo Station是中国威联通科技（QNAP Systems）公司的一个线上相册。用于整理 Qnap Nas 上的多媒体内容（相片和影片）。 QNAP Systems Photo Station存在跨站脚本漏洞，该漏洞源于容易受到跨站脚本攻击。
QNAP Systems Photo Station 跨站脚本漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://cve.imfht.com/detail/CVE-2018-0715
https://www.tenablecloud.cn/plugins/nessus/117905
https://vulnerability.circl.lu/vuln/cve-2018-0715
https://avd.aliyun.com/detail?id=AVD-2020-2491
https://www.nsfocus.net/vulndb/110016
https://www.qnap.com/en/security-advisory/qsa-21-42
https://www.qnap.com.cn/zh-cn/security-advisory/qsa-20-15
https://www.tenable.com/plugins/nessus/117905
https://www.cvedetails.com/product/50117/Qnap-Photo-Station.html?vendor_id=10080
https://nvd.nist.gov/vuln/detail/cve-2018-19954