CVE-2016-10329

Description

References

• seclists.org/oss-sec/2016/q1/236 · Exploit
• bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016 · Exploit
• bamboofox.github.io/2017/03/20/Synology-Bug-Bounty-2016 · Exploit
• synology.com/en-global/support/security/Photo_Station_6_5_3_3226 · Release Notes

photo station 的其他漏洞

• CVE-2022-22681高危 7.5Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass s…
• CVE-2021-29089严重 9.8Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo …
• CVE-2021-29091中危 6.5Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo …
• CVE-2021-29090高危 7.2Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Statio…
• CVE-2021-29092高危 8.8Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allo…