CVE-2015-4656

概要

参考情報

• seclists.org/fulldisclosure/2015/May/110
• securityfocus.com/bid/74816
• securify.nl/advisory/SFY20150504/synology_photo_station_multiple_cross_site_scripting_vulnerabilities.html · Exploit
• synology.com/en-us/support/security/Photo_Station_2945

photo station のその他の脆弱性

• CVE-2022-22681高 7.5Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass s…
• CVE-2021-29089緊急 9.8Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo …
• CVE-2021-29091中 6.5Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo …
• CVE-2021-29090高 7.2Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Statio…
• CVE-2021-29092高 8.8Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allo…