VYPR
← All advisories
High severity8.8NVD Advisory· Published Jun 8, 2018· Updated Jun 17, 2026

CVE-2018-8925

CVE-2018-8925

Description

Cross-site request forgery (CSRF) vulnerability in admin/user.php in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote attackers to hijack the authentication of administrators via the (1) username, (2) password, (3) admin, (4) action, (5) uid, or (6) modify_admin parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Synology/Photo Stationllm-fuzzy2 versions
    <6.8.5-3471, <6.3-2975+ 1 more
    • (no CPE)range: <6.8.5-3471, <6.3-2975
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.