CVE-2015-5473

Samsung SyncThru 6 before 1.0 is affected by multiple directory traversal vulnerabilities that allow remote attackers to delete arbitrary files or execute arbitrary code with SYSTEM privileges. The issues stem from failure to sanitize uploaded file paths in endpoints such as uploadFirmware.html, ...