Cross site scripting

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.18...

Cross site scripting

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.18...

CVE-2021-34356 Stored XSS Vulnerability in Photo Station

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.18...

CVE-2021-34356

CVE-2021-34356 describes a stored cross-site scripting (XSS) vulnerability impacting QNAP Photo Station . The available documents confirm that the vulnerability affected Photo Station and could allow remote attackers to inject malicious code, with a fixed release noted as Photo Station 6.0.18 (re...

CVE-2021-34355 Stored XSS Vulnerability in Photo Station

A cross-site scripting XSS vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 5.4.10...

CVE-2021-34355

CVE-2021-34355 is a cross-site scripting (XSS) vulnerability in QNAP Photo Station for NAS. The issue affects Photo Station prior to fixed releases and could allow remote code injection via the web interface. Fixed versions are Photo Station 5.4.10 and later, 5.7.13 and later, and 6.0.18 and late...

CVE-2021-34354 Stored Cross-site Scripting Vulnerability in Photo Station

A cross-site scripting XSS vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.18...

CVE-2021-34354

CVE-2021-34354 affects QNAP Photo Station prior to and including versions before 6.0.18; it is a stored XSS vulnerability that allows remote attackers to inject malicious code. Affected product: QNAP Photo Station. Root cause: cross-site scripting in the application (exact vulnerable component/fi...

Qnap Photo Station 跨站脚本漏洞

Qnap Photo Station is an online photo album from China's Qnap Technology Qnap. It is used to organize multimedia content photos and videos on Qnap Nas. A cross-site scripting vulnerability exists in QNAP devices prior to Qnap Photo Station 6.0.18 2021 09 01, which can be exploited by remote...

Qnap Photo Station 跨站脚本漏洞

Qnap Photo Station is an online photo album from China's Qnap Technology Qnap. It is used to organize multimedia content photos and videos on Qnap Nas. A cross-site scripting vulnerability exists in versions prior to Qnap Photo Station 6.0.18 2021 09 01, which can be exploited by remote attackers...

QNAP NAS 跨站脚本漏洞

QNAP NAS is an accessible and fast storage solution from QNAP China. A cross-site scripting vulnerability exists in QNAP NAS, which can be exploited by remote attackers to inject malicious code. The following products and versions are affected: Photo Station versions prior to 5.4.10 August 19,...

Siemens Desigo CC Series CCOM Communication Component Deserialization Vulnerability

Cerberus DMS is a hazard management station that helps users manage fire safety and security incidents.Desigo CC is an integrated building management platform for managing high-performance buildings.Desigo CC Compact expands the portfolio with solutions tailored for small and medium-sized...

The vulnerability of the PHP component of the Synology Photo Station storage management tool lies in the lack of security measures for the SQL query structure, allowing attackers to execute arbitrary SQL commands.

The vulnerability of the PHP component used in Synology Photo Station’s image storage management system is related to the lack of security measures for the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL commands remotely...

Simple Water Refilling Station Management System代码问题漏洞

Simple Water Refilling Station Management System is a simple water refilling station management system . A code issue vulnerability exists in Simple Water Refilling Station Management System 1.0, which originates in classes/ System Logo option and updatesettings on the systeminfo page in...

Simple Water Refilling Station Management System SQL注入漏洞

Simple Water Refilling Station Management System is a simple water refilling station management system . A SQL injection vulnerability exists in the v1.0 version of Simple Water Refilling Station Management System, which originates from the application WaterRefilling/classes/Login.php, the userna...

CVE-2021-38841

Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...

CVE-2021-38841

Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...

CVE-2021-38840

SQL Injection can occur in Simple Water Refilling Station Management System 1.0 via the waterrefilling/classes/Login.php username parameter...

CVE-2021-38841

CVE-2021-38841 affects Simple Water Refilling Station Management System 1.0. The vulnerability arises in the SystemLogo option on the system_info page, within classes/SystemSettings.php (update_settings action), enabling Remote Code Execution. Connected documents confirm the affected component an...

CVE-2021-38841

Remote Code Execution can occur in Simple Water Refilling Station Management System 1.0 via the System Logo option on the systeminfo page in classes/SystemSettings.php with an updatesettings action...