Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Synology Photo Station 6.3-2977, 6.8.11-3489 Clear all filters
TI-2019-08859 CVE-2019-11822 · GHSA-9v7v-7ff8-chr8

Path traversal in Synology Photo Station

Priority LOW 31

Relative path traversal vulnerability in SYNO.PhotoStation.File in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to upload arbitrary files via the uploadphoto parameter.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01268 Published 2019-06-30 Fixed in 6.8.11-3489, 6.3-2977 CWE-23
TI-2019-08858 CVE-2019-11821 · GHSA-6wpv-3286-cf7f

SQL injection in Synology Photo Station

Priority MEDIUM 45

SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to execute arbitrary SQL command via the type parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0171 Published 2019-06-30 Fixed in 6.8.11-3489, 6.3-2977 CWE-89