Synology Photo Station before 6.3-2958 allows remote authenticated guest users to execute arbitrary commands via shell metacharacters in the X-Forwarded-For HTTP header to photo/login.php.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2017-04-10T18:00:00Z

Updated: 2024-09-16T23:40:50.706Z

Reserved: 2017-04-10T00:00:00Z

Link: CVE-2016-10322

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2017-04-10T18:59:00.157

Modified: 2017-04-17T12:47:58.983

Link: CVE-2016-10322

cve-icon Redhat

No data.