CVE-2013-7174 | QNAP QTS 4.0/4.0.3 Web Interface cgi-bin/jc.cgi f path traversal (VU#487078 / XFDB-90213)
A vulnerability classified as critical has been found in QNAP QTS 4.0/4.0.3. This affects an unknown part of the file cgi-bin/jc.cgi of the component Web Interface. The manipulation of the argument f leads to path traversal.
This vulnerability is uniquely identified as CVE-2013-7174. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.