Sql injection

2021-06-0114:15:00

PRIOn knowledge base

www.prio-n.com

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.1%

JSON

Improper neutralization of special elements used in an SQL command (‘SQL Injection’) vulnerability in cgi component in Synology Media Server before 1.8.1-2876 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CPENameOperatorVersion
media_servereq< 1.8.1-2876

CPE	Name	Operator	Version
	media_server	eq	< 1.8.1-2876

References

www.synology.com/security/advisory/Synology_SA_20_24