Synology Photo Station Arbitrary File Upload (CVE-2017-11151) - Ver2

A vulnerability exists in Synology Photo Station. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

CVE-2017-11151

A vulnerability in synothemeupload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the logoupload action...

CVE-2017-11151

CVE-2017-11151 affects Synology Photo Station. A vulnerability in synotheme_upload.php allows remote attackers to upload arbitrary files without authentication via the logo_upload action, exposing a path to remote code execution. Affected versions are Photo Station before 6.7.3-3432 and 6.3-2967....

CVE-2017-11151

creationtimestamp| type| source ---|---|--- 2017-08-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42434...