Security Advisory

CVE-2015-4656

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2015-06-18 18:00:00

Last updated 2024-08-06 06:18:12

Assigner mitre

State PUBLISHED

Description

Multiple cross-site scripting (XSS) vulnerabilities in Synology Photo Station before 6.3-2945 allow remote attackers to inject arbitrary web script or HTML via the (1) success parameter to login.php or (2) crafted URL parameters to index.php, as demonstrated by the t parameter to photo/.

← Browse all CVEs View on cve.org ↗