CVE-2016-10331

Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter...

CVE-2016-10331

The vulnerability CVE-2016-10331 affects Synology Photo Station before version 6.5.3-3226. A directory traversal flaw exists in download.php that allows remote attackers to read arbitrary files by supplying a full pathname in the id parameter, due to improper path handling. The issue is confirmed...

CVE-2016-10331

Directory traversal vulnerability in download.php in Synology Photo Station before 6.5.3-3226 allows remote attackers to read arbitrary files via a full pathname in the id parameter...