CVE-2015-6911

SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL commands via the id parameter to watchstatus.cgi...

Sql injection

SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL commands via the id parameter to watchstatus.cgi...

CVE-2015-6911

Synology Video Station is affected by CVE-2015-6911 (versions before 1.5-0763). The vulnerability is a SQL injection in the watchstatus.cgi endpoint triggered via the id parameter, allowing remote attackers to execute arbitrary SQL commands. Affected product: Synology Video Station (before 1.5-07...

PT-2015-7398

Name of the Vulnerable Software and Affected Versions Synology Video Station versions prior to 1.5-0763 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "watchstatus.cgi" endpoint. Recommendations For versions prior to...

CVE-2015-6911: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL commands via the id parameter to watchstatus.cgi...