CVE-2018-0707

HOCH 7.2CVE-2018-0707 · Published 17/07/2018 · updated 17/06/2026

Package	Affected versions	Patched versions
q'center qnap	`≤ 1.7.1063`	No fix yet

Description

Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.

References

packetstormsecurity.com/files/148515/QNAP-Qcenter-Virtual-Appliance-1.6.x-Information-Disclosure-Command-Injection.html · Exploit
seclists.org/fulldisclosure/2018/Jul/45 · Exploit
coresecurity.com/advisories/qnap-qcenter-virtual-appliance-multiple-vulnerabilities · Exploit
exploit-db.com/exploits/45015 · Exploit
exploit-db.com/exploits/45043 · Third Party Advisory
qnap.com/zh-tw/security-advisory/nas-201807-10 · Vendor Advisory
securityfocus.com/archive/1/542141/100/0/threaded · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free