CVE-2024-29238

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

CVE-2024-29238

Synology Surveillance Station is affected by an SQL Injection in the Log.CountByCategory webapi component. The issue arises from improper neutralization of elements in SQL commands, allowing remote authenticated users to read database contents (non-sensitive data) and perform limited denial-of-se...

CVE-2024-29238

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

CVE-2024-29238: Improper Neutralization of Special Elements used in an SQL Command

Improper neutralization of special elements used in an SQL command 'SQL Injection' vulnerability in Log.CountByCategory webapi component in Synology Surveillance Station before 9.2.0-9289 and 9.2.0-11289 allows remote authenticated users to read database containing non-sensitive information and...

PT-2024-22834

Name of the Vulnerable Software and Affected Versions Synology Surveillance Station versions prior to 9.2.0-9289 and 9.2.0-11289 Description The issue is related to an improper neutralization of special elements used in an SQL command, also known as 'SQL Injection', in the Log.CountByCategory...