CVE-2015-6910

SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id parameter to audiotrack.cgi.

• CWE-89

• http://packetstormsecurity.com/files/133519/Synology-Video-Station-1.5-0757-Command-Injection-SQL-Injection.htmlExploit
• http://seclists.org/fulldisclosure/2015/Sep/31
• http://www.securityfocus.com/archive/1/536427/100/0/threaded
• https://www.securify.nl/advisory/SFY20150810/synology_video_station_command_injection_and_multiple_sql_injection_vulnerabilities.htmlExploit
• https://www.synology.com/en-global/releaseNote/VideoStation?model=DS715Vendor Advisory
• https://www.synology.com/en-global/support/security/Video_Station_1_5_0757Vendor Advisory
• http://packetstormsecurity.com/files/133519/Synology-Video-Station-1.5-0757-Command-Injection-SQL-Injection.htmlExploit
• http://seclists.org/fulldisclosure/2015/Sep/31
• http://www.securityfocus.com/archive/1/536427/100/0/threaded
• https://www.securify.nl/advisory/SFY20150810/synology_video_station_command_injection_and_multiple_sql_injection_vulnerabilities.htmlExploit
• https://www.synology.com/en-global/releaseNote/VideoStation?model=DS715Vendor Advisory
• https://www.synology.com/en-global/support/security/Video_Station_1_5_0757Vendor Advisory

Published

Sep 11, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-6904Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-6905Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-6906Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-6907Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2015-6908The ber_get_next function in libraries/liblber/io.c in OpenL…
• CVE-2015-6909Cross-site scripting (XSS) vulnerability in the "Create down…
• CVE-2015-6911SQL injection vulnerability in Synology Video Station before…
• CVE-2015-6912Synology Video Station before 1.5-0763 allows remote attacke…
• CVE-2015-6913Cross-site scripting (XSS) vulnerability in the "Create down…
• CVE-2015-6914Absolute path traversal vulnerability in SiteFactory CMS 5.5…
• CVE-2015-6915SQL injection vulnerability in Montala Limited ResourceSpace…
• CVE-2015-6918salt before 2015.5.5 leaks git usernames and passwords to th…