Synology: >> Photo Station >> 6.8.13-3499 Security Vulnerabilities
Session fixation vulnerability in access control management in Synology Photo Station before 6.8.16-3506 allows remote attackers to bypass security constraint via unspecified vectors.
CVSS Score
8.1
EPSS Score
0.004
Published
2022-07-06
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in thumbnail component in Synology Photo Station before 6.8.14-3500 allows remote attackers users to execute arbitrary SQL commands via unspecified vectors.
CVSS Score
9.8
EPSS Score
0.01
Published
2021-06-02
Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors.
CVSS Score
7.7
EPSS Score
0.001
Published
2021-06-02
Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors.
CVSS Score
7.2
EPSS Score
0.014
Published
2021-06-02
Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors.
CVSS Score
8.8
EPSS Score
0.019
Published
2021-06-01