Skip to content
OpenAdvisories
High · 7.2 CVE-2021-29090 EUVD-2021-15731GHSA-qh9r-964g-2889

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Stati…

Published Jun 2, 2021 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Synology Photo Station

Description

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors.

Affected products

VendorProductAffectedFixed
Synology Synology Photo Station unspecified – < 6.8.14-3500 6.8.14-3500

References