CVE-2012-1556: XSS

Published Sep 12, 2014

Updated

Cross-site scripting (XSS) vulnerability in Synology Photo Station 5 for DiskStation Manager (DSM) 3.2-1955 allows remote attackers to inject arbitrary web script or HTML via the name parameter to photo/photoone.php.

Affected Software

2 affected components

Synology Diskstation Manager=3.2-1955

Synology Synology Photo Station=5

Event History

Sep 12, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-1556?

The severity of CVE-2012-1556 is considered moderate due to its potential for cross-site scripting attacks.

How do I fix CVE-2012-1556?

To fix CVE-2012-1556, update Synology Photo Station to a version that addresses this vulnerability.

What types of attacks can CVE-2012-1556 facilitate?

CVE-2012-1556 can facilitate cross-site scripting attacks, allowing attackers to inject arbitrary web scripts or HTML.

Which versions of Synology are affected by CVE-2012-1556?

CVE-2012-1556 affects Synology DiskStation Manager version 3.2-1955 and Synology Photo Station version 5.

How can attackers exploit CVE-2012-1556?

Attackers can exploit CVE-2012-1556 by injecting malicious scripts through the name parameter in photo/photo_one.php.