CVE-2015-6910

HIGH 7.5CVE-2015-6910 · Published 11/09/2015 · updated 17/06/2026

In short

CVE-2015-6910 is a HIGH (CVSS 7.5) vulnerability affecting video station (synology).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
video station synology	`≤ 1.5-0754`	No fix yet

Description

SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi.

References

packetstormsecurity.com/files/133519/Synology-Video-Station-1.5-0757-Command-Injection-SQL-Injection.html · Exploit
seclists.org/fulldisclosure/2015/Sep/31
securityfocus.com/archive/1/536427/100/0/threaded
securify.nl/advisory/SFY20150810/synology_video_station_command_injection_and_multiple_sql_injection_vulnerabilities.html · Exploit
synology.com/en-global/releaseNote/VideoStation · Vendor Advisory
synology.com/en-global/support/security/Video_Station_1_5_0757 · Vendor Advisory

CVE-2015-6910

In short

Description

References

More vulnerabilities in video station

CVE-2015-6910

In short

Description

References

More vulnerabilities in video station