{"id":"CVE-2016-5675","details":"handle_daylightsaving.php in NUUO NVRmini 2 1.7.5 through 3.0.0, NUUO NVRsolo 1.0.0 through 3.0.0, NUUO Crystal 2.2.1 through 3.2.0, and NETGEAR ReadyNAS Surveillance 1.1.1 through 1.4.1 allows remote attackers to execute arbitrary PHP code via the NTPServer parameter.","modified":"2026-04-10T03:51:52.907026Z","published":"2016-08-31T15:59:01.653Z","references":[{"type":"WEB","url":"https://www.exploit-db.com/exploits/40200/"},{"type":"WEB","url":"http://www.securityfocus.com/bid/92318"},{"type":"ADVISORY","url":"http://www.kb.cert.org/vuls/id/856152"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/crystal-lang/crystal","events":[{"introduced":"0"},{"last_affected":"6d9a1d5830db5f276bf3df37fceeb0d5333e7e14"},{"introduced":"0"},{"last_affected":"ef05e26d6ecb0c7d1f5f0568af76ed001896a601"},{"introduced":"0"},{"last_affected":"b7377c0419ae5c1ce91e8298f075b3ff15636c54"},{"introduced":"0"},{"last_affected":"dd40a2442fa186add8a82b74edb14a90aa1dae05"},{"introduced":"0"},{"last_affected":"af095d72d68b903ea3def7829fb4351c2e768369"},{"introduced":"0"},{"last_affected":"6d9a1d5830db5f276bf3df37fceeb0d5333e7e14"},{"introduced":"0"},{"last_affected":"9f90efe3315eba17685bb628b8b3e4713f00db5d"},{"introduced":"0"},{"last_affected":"a3ee70ca014fdb23d35632bd9b8ce8e692520edf"}],"database_specific":{"versions":[{"introduced":"0"},{"last_affected":"1.1.1"},{"introduced":"0"},{"last_affected":"1.4.0"},{"introduced":"0"},{"last_affected":"1.4.1"},{"introduced":"0"},{"last_affected":"1.0.0"},{"introduced":"0"},{"last_affected":"1.1.0"},{"introduced":"0"},{"last_affected":"1.1.1"},{"introduced":"0"},{"last_affected":"1.2.0"},{"introduced":"0"},{"last_affected":"1.3.0"}]}}],"versions":["0.1.0","0.10.0","0.10.1","0.11.0","0.12.0","0.13.0","0.14.0","0.15.0","0.16.0","0.17.0","0.18.0","0.19.0","0.19.1","0.19.2","0.19.3","0.19.4","0.2.0","0.20.0","0.20.1","0.20.2","0.20.3","0.20.4","0.20.5","0.21.0","0.21.1","0.22.0","0.23.0","0.24.0","0.24.1","0.24.2","0.25.0","0.25.1","0.26.0","0.26.1","0.27.0","0.27.1","0.28.0","0.29.0","0.3.0","0.3.1","0.3.2","0.3.3","0.3.4","0.3.5","0.30.0","0.31.0","0.32.0","0.33.0","0.34.0","0.35.0","0.35.1","0.36.0","0.4.0","0.4.1","0.4.2","0.4.3","0.4.4","0.4.5","0.5.0","0.5.1","0.5.10","0.5.2","0.5.3","0.5.4","0.5.5","0.5.6","0.5.7","0.5.8","0.5.9","0.6.0","0.6.1","0.7.0","0.7.1","0.7.2","0.7.3","0.7.4","0.7.5","0.7.6","0.7.7","0.8.0","0.9.0","0.9.1","1.0.0","1.1.0","1.1.1","1.2.0","1.2.1","1.3.0","1.3.1","1.3.2","1.4.0","1.4.1","ruby","test-doc-3","test-doc-5","tets-doc-4","v0.24.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2016-5675.json","unresolved_ranges":[{"events":[{"introduced":"0"},{"last_affected":"1.1.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.2.0.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.2.4"}]},{"events":[{"introduced":"0"},{"last_affected":"1.3.2.14"}]},{"events":[{"introduced":"0"},{"last_affected":"1.4.2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.2.1"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"3.1.0"}]},{"events":[{"introduced":"0"},{"last_affected":"3.2.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.0.1"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.0.117"}]},{"events":[{"introduced":"0"},{"last_affected":"1.1.2"}]},{"events":[{"introduced":"0"},{"last_affected":"1.75"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.1"}]},{"events":[{"introduced":"0"},{"last_affected":"2.1.5"}]},{"events":[{"introduced":"0"},{"last_affected":"2.2.2"}]},{"events":[{"introduced":"0"},{"last_affected":"2.3"}]},{"events":[{"introduced":"0"},{"last_affected":"2.3.1.20"}]},{"events":[{"introduced":"0"},{"last_affected":"2.3.7.9"}]},{"events":[{"introduced":"0"},{"last_affected":"2.3.7.10"}]},{"events":[{"introduced":"0"},{"last_affected":"2.3.9.6"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"1.7.5"}]},{"events":[{"introduced":"0"},{"last_affected":"1.7.6"}]},{"events":[{"introduced":"0"},{"last_affected":"2.0.0"}]},{"events":[{"introduced":"0"},{"last_affected":"2.2.1"}]},{"events":[{"introduced":"0"},{"last_affected":"3.0.0"}]}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}