Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2019-11821

SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to execute arbitrary SQL command via

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
synology

Description

SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to execute arbitrary SQL command via the type parameter.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Synology Photo Station

  • unspecified to < 6.8.11-3489affected
  • unspecified to < 6.3-2977affected

References