3 matches found
CVE-2018-13282
Session fixation vulnerability in SYNO.PhotoStation.Auth in Synology Photo Station before 6.8.7-3481 allows remote attackers to hijack web sessions via the PHPSESSID parameter...
6.8CVSS5.8AI score0.0096EPSS
SaveExploits0References1
CVE-2018-13282
CVE-2018-13282 affects Synology Photo Station through the SYNO.PhotoStation.Auth component. Versions prior to 6.8.7-3481 are vulnerable to a session fixation flaw that allows remote attackers to hijack web sessions via the PHPSESSID parameter. The description is corroborated by multiple sources (...
6.8CVSS6.3AI score0.0096EPSS
SaveExploits0References1Affected Software1
20