Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

synology photo station 6.5.3-3226 vulnerabilities and exploits

(subscribe to this query)
2.1
CVSSv2
CVE-2017-9552
A design flaw in authentication in Synology Photo Station 6.0-2528 up to and including 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophoto_dsm_user program to authenticate username and password by "synophoto_dsm_user ...
Synology Photo Station 6.0-2636Synology Photo Station 6.5.2-3225Synology Photo Station 6.3-2963Synology Photo Station 6.3-2962Synology Photo Station 6.0-2640Synology Photo Station 6.6.2-3346Synology Photo Station 6.3-2965Synology Photo Station 6.6.1-3346Synology Photo Station 6.3-2964Synology Photo Station 6.5.1-3223Synology Photo Station 6.5.0-3218Synology Photo Station 6.3-2944Synology Photo Station 6.0-2528Synology Photo Station 6.3-2958Synology Photo Station 6.0-2638Synology Photo Station 6.6.1-3345Synology Photo Station 6.6.0-3339Synology Photo Station 6.5.3-3226Synology Photo Station 6.3-2960Synology Photo Station 6.7.1-3419Synology Photo Station 6.4-3166Synology Photo Station 6.0-2639
5
CVSSv2
CVE-2016-10331
Directory traversal vulnerability in download.php in Synology Photo Station prior to 6.5.3-3226 allows remote malicious users to read arbitrary files via a full pathname in the id parameter.
Synology Photo Station
4.6
CVSSv2
CVE-2016-10330
Directory traversal vulnerability in synophoto_dsm_user, a SUID program, as used in Synology Photo Station prior to 6.5.3-3226 allows local users to write to arbitrary files via unspecified vectors.
Synology Photo Station
7.5
CVSSv2
CVE-2016-10329
Command injection vulnerability in login.php in Synology Photo Station prior to 6.5.3-3226 allows remote malicious users to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header.
Synology Photo Station
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook