← CVE Intelligence

CVE-2018-8914

Synology / Media Server PUBLISHED

Description (CNA)

SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4-2654 allows remote attackers to execute arbitrary SQL commands via the ObjectID parameter.

Affected (CNA)

Vendor / productVersions
Synology / Media Serveraffected unspecified before 1.7.6-2842; affected unspecified before 1.4-2654

CWE

CWE-89

References

ADP enrichment

CVE

No English description supplied.