Description (CNA)
Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts via the type parameter.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Synology / Synology Photo Station | affected before 6.7.3-3432 and 6.3-2967 |
CWE
CWE-434
References
- https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation
- https://www.exploit-db.com/exploits/42434/
ADP enrichment
No English description supplied.