SQL Injection Vulnerability in Synology Video Station Products
CVE-2015-6910

Currently unrated

Key Information:

Vendor: Synology
Status: Video Station
Vendor: CVE Published:; 11 September 2015

What is CVE-2015-6910?

An SQL injection vulnerability exists in Synology Video Station versions prior to 1.5-0757. This flaw enables remote attackers to execute arbitrary SQL commands through the 'id' parameter in the audiotrack.cgi script, potentially compromising the integrity and availability of the application. Users of affected versions are urged to upgrade to the latest release to secure their installations and protect against unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch