CVE-2019-11821 HIGH

CVE-2019-11821

Vendor Synology

Product Photo Station

Weakness CWE-89 · SQLi

Published June 30, 2019

Last update September 17, 2024

View on NVD All CVEs

CVSS base score

7.3/10

Attack vector Network

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

SQL injection vulnerability in synophoto_csPhotoDB.php in Synology Photo Station before 6.8.11-3489 and before 6.3-2977 allows remote attackers to execute arbitrary SQL command via the type parameter.

Key dates

02Disclosure timeline

June 30, 2019 CVE published

September 17, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2019-11821 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html

Related vulnerabilities

Identifiers

CVE CVE-2019-11821

CWE CWE-89

CVSS 7.3 / HIGH

Affected versions

Vendor Synology

Product Photo Station

Affected ≥ unspecified and < 6.8.11-3489

Vendor Synology

Product Photo Station

Affected ≥ unspecified and < 6.3-2977

CVE-2019-11821

01Description

02Disclosure timeline

03References

04Related CVE