CVE-2015-6912

Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitlecodepage parameter to subtitle.cgi...

Design/Logic Flaw

Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitlecodepage parameter to subtitle.cgi...

CVE-2015-6912: Improper Neutralization of Special Elements used in a Command

Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitlecodepage parameter to subtitle.cgi...

PT-2015-7399

Name of the Vulnerable Software and Affected Versions Synology Video Station versions prior to 1.5-0763 Description The issue allows remote attackers to execute arbitrary shell commands. This is achieved by injecting shell metacharacters into the subtitle codepage parameter of the "subtitle.cgi"...