CVE-2013-5760

https://notcve.org/view.php?id=CVE-2013-5760

09 Jun 2014 — QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php. QNAP Photo Station anterior a firmware 4.0.3 build0912 permite a atacantes remotos listar cuentas de usuarios del sistema operativo a través de un solicitud hacia photo/p/api/list.php. • https://exchange.xforce.ibmcloud.com/vulnerabilities/89117 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •