CVE-2018-11511 — CVE-2018-11511

CVE-2018-11511

CRITICAL · CVSS 9.8

EPSS exploitation probability: 0%

Published 2018-08-16T20:29:01.673 · Last modified 2026-06-17T01:36:05.153

Summary

The tree list functionality in the photo gallery application in ASUSTOR ADM 3.1.0.RFQ3 has a SQL injection vulnerability that affects the 'album_id' or 'scope' parameter via a photo-gallery/api/album/tree_lists/ URI.

Affected products

asustor — asustor_data_master

Does this affect you?

Add your gear to cvedb and we'll alert you only when asustor ships something exploited.

Check my exposure →

References

NVD entry
CVE.org record

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.