CVE-2016-10330

概要

参考情報

• seclists.org/oss-sec/2016/q1/236 · Exploit
• bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016 · Exploit
• bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016 · Exploit
• synology.com/en-global/support/security/Photo_Station_6_5_3_3226 · Release Notes

photo station のその他の脆弱性

• CVE-2022-22681高 7.5Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass s…
• CVE-2021-29089緊急 9.8Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo …
• CVE-2021-29091中 6.5Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo …
• CVE-2021-29090高 7.2Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Statio…
• CVE-2021-29092高 8.8Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allo…