Skip to content
OpenAdvisories
High · 7.3 CVE-2018-8914 EUVD-2018-20522GHSA-m3m7-97fh-532j

SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4-2654 allows remote attackers to execute a…

Published May 10, 2018 · Updated Sep 16, 2024 · Assigned by synology

Vendor: Synology Product: Media Server

Description

SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4-2654 allows remote attackers to execute arbitrary SQL commands via the ObjectID parameter.

Affected products

VendorProductAffectedFixed
Synology Media Server unspecified – < 1.7.6-2842, unspecified – < 1.4-2654 1.7.6-2842

References