Description (CNA)
SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to execute arbitrary SQL command via the type parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synology / Photo Station | affected unspecified before 6.8.11-3489; affected unspecified before 6.3-2977 |
CWE
CWE-89
References
ADP enrichment
No English description supplied.