Back to search
CVE-2015-6909
Published: Sep 11, 2015
Modified: Aug 6, 2024
PUBLISHED
Description
Cross-site scripting (XSS) vulnerability in the "Create download task via file upload" feature in Synology Download Station before 3.5-2962 allows remote attackers to inject arbitrary web script or HTML via the name element in the Info dictionary in a torrent file.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20150909 Multiple Cross-Site Scripting vulnerabilities in Synology Download Station
mailing-list
x_refsource_BUGTRAQ
https://www.synology.com/en-global/releaseNote/DownloadStation?model=DS715
x_refsource_CONFIRM
20150909 Multiple Cross-Site Scripting vulnerabilities in Synology Download Station
mailing-list
x_refsource_FULLDISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now