Synology Photo Station Arbitrary File Acquisition Vulnerability

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A security vulnerability exists in the picasa.php file in Synology Photo Station versions prior to 6.8.1-3458 and prior to 6.3-2970. A remote attacker can exploit the vulnerability to obtain...

CVE-2017-12079

Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via progid field...

CVE-2017-12079: Files or Directories Accessible to External Parties

Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via progid field...

PT-2017-12341

Name of the Vulnerable Software and Affected Versions Synology Photo Station versions prior to 6.8.1-3458 Synology Photo Station versions prior to 6.3-2970 Description The issue allows remote attackers to obtain arbitrary files. This is achieved via the prog id field in the picasa.php file...