Approved changes feed: RSS · Atom

cpe:2.3:o:synology:dsm:3.0-1334:*:*:*:*:*:*:*

part: o version: 3.0-1334 update: *

VendorSynology (65464e9b-7339-559d-9719-837f074e0220)
ProductDsm (cc6ea36d-80c9-56c2-90d1-ee6f8cb286b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2453 vulnerable 2026-06-08 04:55:07.697719 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Synology Disk Station 2.x before DSM3.0-1337 allow remote attackers to inject arbitrary web script or HTML by connecting to the FTP server and providing a crafted (1) USER or (2) PASS command, which is written by the FTP logging module to a web-interface log window, related to a "web commands injection" issue.
Published: 2010-09-29T16:00:00.000Z
Updated: 2024-08-07T02:32:16.580Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.