Synology Photo Station SQL Injection Vulnerability

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A SQL injection vulnerability exists in Synology Photo Station versions prior to 6.7.4-3433 and prior to 6.3-2968. A remote attacker can execute arbitrary SQL commands by sending the 'articleid...

CVE-2017-11161: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in Synology Photo Station before 6.7.4-3433 and 6.3-2968 allow remote attackers to execute arbitrary SQL commands via the 1 articleid parameter to label.php; or 2 type parameter to synotheme.php...