Security Advisory
CVE-2013-5760
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
QNAP Photo Station before firmware 4.0.3 build0912 allows remote attackers to list OS user accounts via a request to photo/p/api/list.php.