| Package | Affected versions | Patched versions |
|---|---|---|
| media server | ≥ 1.4, < 1.4-2654≥ 1.7, < 1.7.6-2842 | 1.4-26541.7.6-2842 |
SQL injection vulnerability in UPnP DMA in Synology Media Server before 1.7.6-2842 and before 1.4-2654 allows remote attackers to execute arbitrary SQL commands via the ObjectID parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free