VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 2, 2021· Updated Sep 17, 2024

CVE-2021-29090

CVE-2021-29090

Description

Improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability in PHP component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary SQL command via unspecified vectors.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Synology/Photo Stationllm-fuzzy2 versions
    <6.8.14-3500+ 1 more
    • (no CPE)range: <6.8.14-3500
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.