Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts via the type parameter.
References
Link | Resource |
---|---|
https://www.exploit-db.com/exploits/42434/ | Third Party Advisory VDB Entry |
https://www.synology.com/en-global/support/security/Synology_SA_17_34_PhotoStation | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2017-08-08 15:29
Updated : 2024-02-28 16:04
NVD link : CVE-2017-11154
Mitre link : CVE-2017-11154
CVE.ORG link : CVE-2017-11154
JSON object : View
Products Affected
synology
- photo_station
CWE
CWE-434
Unrestricted Upload of File with Dangerous Type