CVE-2021-29089: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQL commands via unspecified vectors...

CVE-2021-29090: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors...

PT-2021-18078

Name of the Vulnerable Software and Affected Versions: Synology Photo Station versions prior to 6.8.14-3500 Description: The issue is related to improper neutralization of special elements used in an SQL command, also known as SQL Injection, in the thumbnail component. This allows remote attacker...

CVE-2021-33180

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2021-33180

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2021-33180

Synology Media Server, in the cgi component, is affected by CVE-2021-33180 (pre-1.8.1-2876) due to improper neutralization of input in an SQL command, allowing remote attackers to execute arbitrary SQL via unspecified vectors. Public details consistently cite a SQL injection vulnerability with re...

PT-2021-3994

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.8.14-3500 Description The issue is related to the improper neutralization of special elements used in SQL commands, which can be exploited to execute arbitrary SQL commands. This can be done by remote...

PT-2021-20064

Name of the Vulnerable Software and Affected Versions Synology Media Server versions prior to 1.8.1-2876 Description The issue is related to improper neutralization of special elements used in an SQL command, allowing remote attackers to execute arbitrary SQL commands. Recommendations For version...

Synology Photo Station SQL injection vulnerability

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology Inc. of Taiwan, China. A SQL injection vulnerability exists in Synology Photo Station versions prior to 6.8.14-3500, which can be exploited by attackers to execute arbitrary SQL commands vi...

CVE-2021-33180: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

emlog SQL Injection Vulnerability

emlog is a powerful blog and CMS builder based on PHP and MySQL. A SQL injection vulnerability exists in emlog version 6.0.0-stable. An attacker can exploit this vulnerability to execute arbitrary SQL statements and query sensitive server data via admin/navbar.php?action=addpage...

CVE-2021-20720

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

CVE-2021-20720

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

CVE-2021-20720

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

Sql injection

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

PT-2021-14178

Name of the Vulnerable Software and Affected Versions: KonaWiki2 versions prior to 2.2.4 Description: The issue allows remote attackers to execute arbitrary SQL commands and to obtain or alter the information stored in the database via unspecified vectors. This is a SQL injection vulnerability...

CVE-2021-20720: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the KonaWiki2 versions prior to 2.2.4 allows remote attackers to execute arbitrary SQL commands and to obtain/alter the information stored in the database via unspecified vectors...

KonaWiki SQL Injection Vulnerability

KonaWiki is a lightweight Wiki system. The system is primarily used for writing manuscripts, keeping minutes and memos, etc. A SQL injection vulnerability exists in KonaWiki2 prior to version 2.2.4. The vulnerability stems from the program not performing sufficient cleansing of user-supplied data...

SQL Injection

storage-jdbc-hikaricp-plugin is vulnerable to SQL injection. The wildcard query cases when using H2/MySQL/TiDB allows an attacker to inject and execute arbitrary SQL statements...