Synology Photo Station Input Validation Vulnerability

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. An input validation vulnerability exists in SYNOPHOTOFlickrMultiUpload in Synology Photo Station versions prior to 6.8.3-3463 and 6.3-2971. A remote attacker can exploit the vulnerability to...

CVE-2017-16772

Improper input validation vulnerability in SYNOPHOTOFlickrMultiUpload in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote authenticated users to execute arbitrary codes via the progid parameter...

Input validation

Improper input validation vulnerability in SYNOPHOTOFlickrMultiUpload in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote authenticated users to execute arbitrary codes via the progid parameter...

CVE-2017-16771

Cross-site scripting XSS vulnerability in Log Viewer in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2017-16771

Cross-site scripting XSS vulnerability in Log Viewer in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in Log Viewer in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2017-16772

Improper input validation vulnerability in SYNOPHOTOFlickrMultiUpload in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote authenticated users to execute arbitrary codes via the progid parameter...

CVE-2017-16772

Synology Photo Station (before versions 6.8.3-3463 and 6.3-2971) contains an input validation vulnerability in the SYNOPHOTO_Flickr_MultiUpload component. This flaw allows remote authenticated users to execute arbitrary code via the prog_id parameter. Root cause: improper input validation within ...

CVE-2017-16771

Synology Photo Station's Log Viewer is affected by a Cross-Site Scripting (XSS) vulnerability in versions prior to 6.8.3-3463 and prior to 6.3-2971. The issue enables an attacker to inject arbitrary web script or HTML through the username parameter, potentially affecting users who view affected p...

CVE-2017-16771

Cross-site scripting XSS vulnerability in Log Viewer in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote attackers to inject arbitrary web script or HTML via the username parameter...

CVE-2014-4612

Cross-site scripting XSS vulnerability in the keywords manager keywordmgr.php in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the keywords manager keywordmgr.php in Coppermine Photo Gallery before 1.5.27 and 1.6.x before 1.6.01 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-4612

The vulnerability CVE-2014-4612 affects Coppermine Photo Gallery, specifically the keywords manager (keywordmgr.php). It is exploitable via cross-site scripting (XSS) in versions before 1.5.27 and in 1.6.x before 1.6.01. The root cause is an XSS flaw that allows remote attackers to inject arbitra...

Piwigo cross-site scripting vulnerability (CNVD-2018-06553)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. A cross-site scripting vulnerability exists in the admin panel in Piwigo version 2.9.3. A remote attacker can exploit th...

CVE-2018-7724

The management panel in Piwigo 2.9.3 has stored XSS via the name parameter in a /admin.php?page=photo-$photonumber request. CSRF exploitation, related to CVE-2017-10681, may be possible...

CVE-2018-7665

An issue was discovered in ClipBucket before 4.0.0 Release 4902. A malicious file can be uploaded via the name parameter to actions/beatsuploader.php or actions/photouploader.php, or the coverPhoto parameter to editaccount.php...

ClipBucket Malicious File Upload Vulnerability

ClipBucket is an open source video sharing software developed by Arslan team. The software allows you to share videos to video sites and supports the lights off effect when watching a movie. A security vulnerability exists in versions prior to ClipBucket 4.0.0 Release 4902. An attacker could send...

Chengdu Hengtu Technology Co., Ltd.'s Good Photo Image Processing Software Has a Denial of Service Vulnerability

Good Photo is a multi-platform professional-grade image processing software developed by Chengdu Hengtu Technology Co. A denial-of-service vulnerability exists in Chengdu Hengtu Technology Co., Ltd.'s Good Photo image processing software when initializing the image header, which is due to the...

CVE-2017-16770

File and directory information exposure vulnerability in SYNO.SurveillanceStation.PersonalSettings.Photo in Synology Surveillance Station before 8.1.2-5469 allows remote authenticated users to obtain other user's sensitive files via the filename parameter...

WordPress Photo Gallery by WD plugin <=1.3.66 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found in WordPress Photo Gallery by WD plugin versions =1.3.66. Solution Update the WordPress Photo Gallery by WD plugin to the latest available version at least 1.3.67...