CVE-2017-11154

Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts via the type parameter.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:synology:photo_station:*:*:*:*:*:*:*:*
cpe:2.3:a:synology:photo_station:6.3-2967:*:*:*:*:*:*:*

History

No history.

Information

Published : 2017-08-08 15:29

Updated : 2024-02-28 16:04


NVD link : CVE-2017-11154

Mitre link : CVE-2017-11154

CVE.ORG link : CVE-2017-11154


JSON object : View

Products Affected

synology

  • photo_station
CWE
CWE-434

Unrestricted Upload of File with Dangerous Type