Unrated severityNVD Advisory· Published Sep 11, 2015· Updated May 6, 2026
CVE-2015-6910
CVE-2015-6910
Description
SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6- packetstormsecurity.com/files/133519/Synology-Video-Station-1.5-0757-Command-Injection-SQL-Injection.htmlnvdExploit
- www.securify.nl/advisory/SFY20150810/synology_video_station_command_injection_and_multiple_sql_injection_vulnerabilities.htmlnvdExploit
- www.synology.com/en-global/releaseNote/VideoStationnvdVendor Advisory
- www.synology.com/en-global/support/security/Video_Station_1_5_0757nvdVendor Advisory
- seclists.org/fulldisclosure/2015/Sep/31nvd
- www.securityfocus.com/archive/1/536427/100/0/threadednvd
News mentions
0No linked articles in our index yet.