| Package | Affected versions | Patched versions |
|---|---|---|
| photo station | ≤ 6.5.2-3225 |
Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free