CVE

Id
54799  
CVE No.
CVE-2012-1556  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM) 3.2-1955 allows remote attackers to inject arbitrary web script or HTML via the name parameter to photo/photo_one.php.  
Phase
Assigned (20120310)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
573504 54799 CVE-2012-1556 BUGTRAQ:20120310 Synology Photo Station 5 - Reflected Cross-Site Scripting  View
573505 54799 CVE-2012-1556 URL:http://archives.neohapsis.com/archives/bugtraq/2012-03/0045.html  View
573506 54799 CVE-2012-1556 BID:52416  View
573507 54799 CVE-2012-1556 URL:http://www.securityfocus.com/bid/52416  View
573508 54799 CVE-2012-1556 OSVDB:80034  View
573509 54799 CVE-2012-1556 URL:http://osvdb.org/80034  View
573510 54799 CVE-2012-1556 SECUNIA:48334  View
573511 54799 CVE-2012-1556 URL:http://secunia.com/advisories/48334  View
573512 54799 CVE-2012-1556 XF:photostation-photoone-xss(73976)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
30470 JVNDB-2012-006178 Drupal 用 Finder モジュールにおけるクロスサイトスクリプティングの脆弱性 Drupal 用 Finder モジュールには、"チェックボックスとラジオボタンの機能" に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2012-1561 54799 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-006178.html  View