CVE-2017-13068

QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection on the application and obtain Helpdesk application information. A remote attacker does not require any privileges to successfully execute this attack.

• CWE-89

• https://www.qnap.com/en/security-advisory/nas-201709-29Vendor Advisory
• https://www.qnap.com/en/security-advisory/nas-201709-29Vendor Advisory

Published

Oct 6, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13062In ImageMagick 7.0.6-6, a memory leak vulnerability was foun…
• CVE-2017-13063GraphicsMagick 1.3.26 has a heap-based buffer overflow vulne…
• CVE-2017-13064GraphicsMagick 1.3.26 has a heap-based buffer overflow vulne…
• CVE-2017-13065GraphicsMagick 1.3.26 has a NULL pointer dereference vulnera…
• CVE-2017-13066GraphicsMagick 1.3.26 has a memory leak vulnerability in the…
• CVE-2017-13067QNAP has patched a remote code execution vulnerability affec…
• CVE-2017-13069QNAP discovered a number of command injection vulnerabilitie…
• CVE-2017-13070A DLL Hijacking vulnerability in QNAP Qsync for Windows (exe…
• CVE-2017-13071QNAP has already patched this vulnerability. This security c…
• CVE-2017-13072Cross-site scripting (XSS) vulnerability in App Center in QN…
• CVE-2017-13073Cross-site scripting (XSS) vulnerability in QNAP NAS applica…
• CVE-2017-13077Wi-Fi Protected Access (WPA and WPA2) allows reinstallation …