Security Advisory

CVE-2015-6913

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-09-11 16:00:00

Last updated 2024-08-06 07:36:34

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the "Create download task via URL" feature in Synology Download Station before 3.5-2967 allows remote attackers to inject arbitrary web script or HTML via the urls parameter in an add_url_task action to dlm/downloadman.cgi.

← Browse all CVEs View on cve.org ↗