Arbitrary File Write Vulnerability in Synology Photo Station

CVE-2017-11152 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:N

Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to write arbitrary files via the path parameter.

Learn more about our Web Application Penetration Testing UK.