CVE-2010-2453: XSS
First published: Wed Sep 29 2010(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted (1) USER or (2) PASS command, which is written by the FTP logging module to a web-interface log window, related to a "web commands injection" issue.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Synology Dsm | =2.2-0942 | |
| Synology Dsm | =2.2-1041 | |
| Synology Dsm | =2.2-1042 | |
| Synology Dsm | =2.2-1045 | |
| Synology Dsm | =2.3-1139 | |
| Synology Dsm | =2.3-1141 | |
| Synology Dsm | =2.3-1144 | |
| Synology Dsm | =2.3-1157 | |
| Synology Dsm | =2.3-1161 | |
| Synology Dsm | =3.0-1334 | |
| Synology Disk Station Ds1010\+ | ||
| Synology Disk Station Ds109 | ||
| Synology Disk Station Ds110\+ | ||
| Synology Disk Station Ds110j | ||
| Synology Disk Station Ds209 | ||
| Synology Disk Station Ds210\+ | ||
| Synology Disk Station Ds210j | ||
| Synology Disk Station Ds409slim | ||
| Synology Disk Station Ds410 | ||
| Synology Disk Station Ds410j | ||
| Synology Disk Station Ds411\+ | ||
| Synology Disk Station Ds710\+ |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/event
- agent/softwarecombine
- agent/weakness
- agent/first-publish-date
- agent/last-modified-date
- agent/type
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/synology
- canonical/synology dsm
- version/synology dsm/2.2-0942
- version/synology dsm/2.2-1041
- version/synology dsm/2.2-1042
- version/synology dsm/2.2-1045
- version/synology dsm/2.3-1139
- version/synology dsm/2.3-1141
- version/synology dsm/2.3-1144
- version/synology dsm/2.3-1157
- version/synology dsm/2.3-1161
- version/synology dsm/3.0-1334
- canonical/synology disk station ds1010\+
- canonical/synology disk station ds109
- canonical/synology disk station ds110\+
- canonical/synology disk station ds110j
- canonical/synology disk station ds209
- canonical/synology disk station ds210\+
- canonical/synology disk station ds210j
- canonical/synology disk station ds409slim
- canonical/synology disk station ds410
- canonical/synology disk station ds410j
- canonical/synology disk station ds411\+
- canonical/synology disk station ds710\+