high7.3
CVE-2018-8914
SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4-2654 allows remote attackers to execute arbitrary SQL command…
Impact
SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4-2654 allows remote attackers to execute arbitrary SQL commands via the ObjectID parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Synology | Media Server | from 1.4 before 1.4-2654 from 1.7 before 1.7.6-2842 |