CVE-2015-9105

State: Published
Severity: Not scored
Published: Jun 30, 2017
Updated: Sep 16, 2024
Reserved: Jun 29, 2017

Description

Multiple cross-site scripting (XSS) vulnerabilities in Synology Video Station 1.2 before 1.2-0455, 1.5 before 1.5-0772, and 1.6 before 1.6-0847 allow remote authenticated attackers to inject arbitrary web script or HTML via the (1) file name or (2) collection name of videos.

Scores

The record has no CVSS score.

Weaknesses

CWE-79 Cross Site Scripting (CWE-79)

Affected Products

Product	Versions
Video StationSynology	1.2Affected 1.5Affected 1.6Affected

References

http://www.fortiguard.com/zeroday/FG-VD-15-107
https://www.synology.com/en-global/support/security/Video_station_1_5_0772
http://www.fortiguard.com/zeroday/FG-VD-15-108

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.