CVE-2015-5473

Samsung SyncThru 6 before 1.0 is affected by multiple directory traversal vulnerabilities that allow remote attackers to delete arbitrary files or execute arbitrary code with SYSTEM privileges. The issues stem from failure to sanitize uploaded file paths in endpoints such as uploadFirmware.html, ...

CVE-2015-5473: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary files via unspecified parameters to 1 upload/updateDriver or 2 upload/addDriver or to execute arbitrary code with SYSTEM privileges via unspecified parameters to 3...

PT-2015-3286

Name of the Vulnerable Software and Affected Versions Samsung SyncThru 6 versions prior to 1.0 Description The vulnerability exists in the Samsung SyncThru 6 web application due to incorrect restriction of the directory path name with limited access. Exploitation of the vulnerability may allow a...