NetSight
high8.8

CVE-2023-50360

A SQL injection vulnerability has been reported to affect Video Station.

Impact

A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.1 ( 2024/02/26 ) and later

Affected products

VendorProductAffected versions
QnapVideo Station
from 5.0.0 before 5.8.2

Weakness classification

References