CVE-2018-19947

The vulnerability have been reported to affect earlier versions of Helpdesk. If exploited, this information exposure vulnerability could disclose sensitive information. QNAP has already fixed the issue in Helpdesk 3.0.3 and later.

• CWE-200
• CWE-209
• CWE-210
• CWE-209

• https://www.qnap.com/zh-tw/security-advisory/qsa-20-05Vendor Advisory
• https://www.qnap.com/zh-tw/security-advisory/qsa-20-05Vendor Advisory

Published

Sep 11, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19941A vulnerability has been reported to affect QNAP NAS. If exp…7.5
• CVE-2018-19942A cross-site scripting (XSS) vulnerability has been reported…6.1
• CVE-2018-19943If exploited, this cross-site scripting vulnerability could …5.4
• CVE-2018-19944A cleartext transmission of sensitive information vulnerabil…7.5
• CVE-2018-19945A vulnerability has been reported to affect earlier QNAP dev…9.1
• CVE-2018-19946The vulnerability have been reported to affect earlier versi…5.9
• CVE-2018-19948The vulnerability have been reported to affect earlier versi…6.5
• CVE-2018-19949If exploited, this command injection vulnerability could all…9.8
• CVE-2018-19950If exploited, this command injection vulnerability could all…9.8
• CVE-2018-19951If exploited, this cross-site scripting vulnerability could …6.1
• CVE-2018-19952If exploited, this SQL injection vulnerability could allow r…7.5
• CVE-2018-19953If exploited, this cross-site scripting vulnerability could …6.1