Vulnerabilities

TI-2018-08231 CVE-2018-11511 · GHSA-8ccp-76j3-r8wf

The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3…

MEDIUM 55

The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'album_id' or 'scope' parameter via a photo-gallery/api/album/tree_lists/ URI.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.11126 Published 2018-08-16 No fix listed CWE-89

TI-2018-08229 CVE-2018-11509 · GHSA-wqjr-3h8v-rgjg

ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does…

MEDIUM 56

ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are installed from the online repository.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.12418 Published 2018-08-16 No fix listed CWE-798

Vulnerabilities

Filters

The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3…

ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does…