CVE-2018-13285

Command injection vulnerability in ftpd in Synology Router Manager SRM before 1.1.7-6941-1 allows remote authenticated users to execute arbitrary OS commands via the 1 MKD or 2 RMD command...

CVE-2018-13287

Incorrect default permissions vulnerability in synouser.conf in Synology Router Manager SRM before 1.1.7-6941-1 allows remote authenticated users to obtain sensitive information via the world readable configuration...

Synology Router Manager Cross-Site Scripting Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology. A cross-site scripting vulnerability exists in the info.cgi file in Synology SRM versions prior to 1.1.7-6941, which can be exploited by remote attackers to inject arbitrary web script or HTML...

CVE-2018-8918

Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

CVE-2018-8918

Synology Router Manager (SRM) is affected by a cross-site scripting (XSS) vulnerability in the info.cgi endpoint. The issue allows remote attackers to inject arbitrary web script or HTML via the host parameter in SRM versions prior to 1.1.7-6941. The root cause is an XSS flaw in how the host para...

CVE-2018-8918

Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

CVE-2018-8918

Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

CVE-2018-8918

Cross-site scripting XSS vulnerability in info.cgi in Synology Router Manager SRM before 1.1.7-6941 allows remote attackers to inject arbitrary web script or HTML via the host parameter...

Synology Router Manager Command Injection Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology.EZ-Internet is one of the network configuration tools. A command injection vulnerability exists in EZ-Internet in Synology SRM versions prior to 1.1.6-6931. A remote attacker can exploit the...

CVE-2017-12078

Command injection vulnerability in EZ-Internet in Synology Router Manager SRM before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter...

CVE-2017-12078

Command injection vulnerability in EZ-Internet in Synology Router Manager SRM before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter...

CVE-2017-12078

Command injection vulnerability in EZ-Internet in Synology Router Manager SRM before 1.1.6-6931 allows remote authenticated users to execute arbitrary command via the username parameter...

CVE-2017-12078

CVE-2017-12078 affects Synology Router Manager (SRM) with EZ-Internet, where a vulnerability in the EZ-Internet component allows a remote authenticated user to execute arbitrary commands via the username parameter. Affected product/version: SRM before 1.1.6-6931. The connected sources provide con...

Synology Router Manager Path Traversal Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology. A directory traversal vulnerability exists in SYNO.FileStation.Extract in versions of SRM prior to 1.1.5-6542-4. A remote attacker can exploit this vulnerability to write arbitrary files with th...

CVE-2017-15895

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager SRM before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...

Directory traversal

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager SRM before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...

CVE-2017-15895

Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager SRM before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...

CVE-2017-15895

CVE-2017-15895 affects Synology Router Manager (SRM) 1.1.x, where the directory traversal vulnerability in SYNO.FileStation.Extract allows remote authenticated users to write arbitrary files via the dest_folder_path parameter. Impact expected: potential integrity loss on SRM file writes; no confi...

Synology Router Manager (SRM) Denial of Service Vulnerability

Synology Router Manager SRM is a software for configuring and managing Synology routers from Synology. A security vulnerability exists in SYNO.Core.PortForwarding.Rule in versions of SRM prior to 1.1.4-6509. A remote attacker could exploit this vulnerability to cause a denial of service memory...