CVE-2015-4655

Affected product and component: Synology DiskStation Manager (DSM) prior to 5.2-5565 Update 1, specifically the entry.cgi endpoint. Vulnerability and root cause: Cross-site scripting (XSS) vulnerability where an attacker can inject arbitrary web script or HTML via the cookie-like parameter named ...

CVE-2015-4655: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Synology DiskStation Manager DSM before 5.2-5565 Update 1 allows remote attackers to inject arbitrary web script or HTML via the "compound" parameter to entry.cgi...

PT-2015-6655 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 5.2-5565 Update 1 Description: The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the...