Synology DiskStation Manager Cross-site Scripting (CVE-2015-4655)

Cross-site scripting XSS vulnerability in Synology DiskStation Manager DSM before 5.2-5565 Update 1 allows remote attackers to inject arbitrary web script or HTML via the compound parameter to entry.cgi. This plugin only works with Tenable.ot. Please visit...

CVE-2015-4655

Cross-site scripting XSS vulnerability in Synology DiskStation Manager DSM before 5.2-5565 Update 1 allows remote attackers to inject arbitrary web script or HTML via the "compound" parameter to entry.cgi...

PT-2015-6655 · Synology · Synology Diskstation Manager

Name of the Vulnerable Software and Affected Versions: Synology DiskStation Manager DSM versions prior to 5.2-5565 Update 1 Description: The issue is related to a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML. This is achieved via the...

Synology DiskStation Manager 'entry.cgi' Cross-Site Scripting Vulnerability

Synology DiskStation Manager is an operating system for use on networked storage servers NAS. A cross-site scripting vulnerability in Synology DiskStation Manager 'entry.cgi' allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtain...