CVE-2015-4656

🗓️ 18 Jun 2015 18:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 45 Views🌐 WEB

CVE-2015-4656 Multiple XSS vulnerabilities in Synology Photo Station before 6.3-2945 allow remote attackers to inject arbitrary web script or HTML

Reporter	Title	Published	Views	Family All 6
CNVD	Multiple Cross-Site Scripting Vulnerabilities in Synology Photo Station-2945	26 Jun 201500:00	–	cnvd
Cvelist	CVE-2015-4656	18 Jun 201518:00	–	cvelist
EUVD	EUVD-2015-4675	7 Oct 202500:30	–	euvd
NVD	CVE-2015-4656	18 Jun 201518:59	–	nvd
OpenVAS	Synology Photo Station Command Injection and multiple Cross Site Scripting Vulnerabilities	26 May 201500:00	–	openvas
Prion	Cross site scripting	18 Jun 201518:59	–	prion

NVD

Node

Source	Link
securityfocus	www.securityfocus.com/bid/74816
seclists	www.seclists.org/fulldisclosure/2015/May/110
securify	www.securify.nl/advisory/SFY20150504/synology_photo_station_multiple_cross_site_scripting_vulnerabilities.html
synology	www.synology.com/en-us/support/security/Photo_Station_2945

Parameter	Position	Path	Description	CWE
success	query param	login.php	XSS via the success parameter in login.php	CWE-79
<unspecified>	query param	index.php	Crafted URL parameters in index.php may enable XSS	CWE-79
t	query param	photo/	XSS via the t parameter to photo/ (demonstrated by t parameter in URL)	CWE-79

06 May 2026 22:30Current

5.9Medium risk

Vulners AI Score5.9

CVSS 24.3

EPSS0.00285