Sql injection

SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi...

CVE-2015-6910

SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi...

PT-2015-7397

Name of the Vulnerable Software and Affected Versions Synology Video Station versions prior to 1.5-0757 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "audiotrack.cgi" endpoint. Recommendations For versions prior to...

CVE-2015-6910: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi...