← Back to CVE List

CVE-2016-10329

Published: 2017-05-12T20:29Z
Last Modified: 2024-11-21T02:43Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Command injection vulnerability in login.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to execute arbitrary code via shell metacharacters in the crafted 'X-Forwarded-For' header. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt