CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-6913

Cross-site scripting (XSS) vulnerability in the "Create download task via URL" feature in Synology Download Station before 3.5-2967 allows remote attackers to inject arbitrary web script or HTML via the urls parameter in an add_url_task action to dlm/downloadman.cgi.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 58.3%

CVSS Severity

CVSS v2 Score 4.3

References

Products affected by CVE-2015-6913

Synology » Download Station » Version: N/A

cpe:2.3:a:synology:download_station:-
Synology » Download Station » Version: 3.2-2295

cpe:2.3:a:synology:download_station:3.2-2295
Synology » Download Station » Version: 3.3-2382

cpe:2.3:a:synology:download_station:3.3-2382
Synology » Download Station » Version: 3.3-2383

cpe:2.3:a:synology:download_station:3.3-2383
Synology » Download Station » Version: 3.3-2386

cpe:2.3:a:synology:download_station:3.3-2386
Synology » Download Station » Version: 3.4-2477

cpe:2.3:a:synology:download_station:3.4-2477
Synology » Download Station » Version: 3.4-2478

cpe:2.3:a:synology:download_station:3.4-2478
Synology » Download Station » Version: 3.4-2480

cpe:2.3:a:synology:download_station:3.4-2480
Synology » Download Station » Version: 3.4-2485

cpe:2.3:a:synology:download_station:3.4-2485
Synology » Download Station » Version: 3.4-2486

cpe:2.3:a:synology:download_station:3.4-2486
Synology » Download Station » Version: 3.4-2489

cpe:2.3:a:synology:download_station:3.4-2489
Synology » Download Station » Version: 3.4-2490

cpe:2.3:a:synology:download_station:3.4-2490
Synology » Download Station » Version: 3.4-2514

cpe:2.3:a:synology:download_station:3.4-2514
Synology » Download Station » Version: 3.4-2555

cpe:2.3:a:synology:download_station:3.4-2555
Synology » Download Station » Version: 3.4-2557

cpe:2.3:a:synology:download_station:3.4-2557
Synology » Download Station » Version: 3.4-2558

cpe:2.3:a:synology:download_station:3.4-2558
Synology » Download Station » Version: 3.5-2638

cpe:2.3:a:synology:download_station:3.5-2638
Synology » Download Station » Version: 3.5-2705

cpe:2.3:a:synology:download_station:3.5-2705
Synology » Download Station » Version: 3.5-2706

cpe:2.3:a:synology:download_station:3.5-2706
Synology » Download Station » Version: 3.5-2955

cpe:2.3:a:synology:download_station:3.5-2955
Synology » Download Station » Version: 3.5-2956

cpe:2.3:a:synology:download_station:3.5-2956
Synology » Download Station » Version: 3.5-2962

cpe:2.3:a:synology:download_station:3.5-2962

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2015-6913

Products

Pricing

Contact Us