漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On
Vulnerability Description
An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia Console and the Media Streaming add-on. QTS 4.3.3: Media Streaming add-on 430.1.8.10 and later QTS 4.3.6: Media Streaming add-on 430.1.8.8 and later QTS 4.4.x and later: Multimedia Console 1.3.4 and later We have also fixed this vulnerability in the following versions of QTS 4.3.3 and QTS 4.3.6, respectively: QTS 4.3.3.1624 Build 20210416 or later QTS 4.3.6.1620 Build 20210322 or later
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
输入验证不恰当
Vulnerability Title
Qnap Systems QNAP NAS running Multimedia Console SQL注入漏洞
Vulnerability Description
Qnap Systems QNAP NAS running Multimedia Console是中国威联通（Qnap Systems）公司的一个应用软件。一个多媒体控制台。 QNAP NAS running Multimedia Console 存在安全漏洞，攻击者可利用该漏洞就可以获得应用程序信息。
CVSS Information
N/A
Vulnerability Type
N/A