PT-2014-2231

Name of the Vulnerable Software and Affected Versions Synology Photo Station 5 for DiskStation Manager DSM version 3.2-1955 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the name parameter to "photo/photo one.php" API endpoint...