EDB-42434
functionalSynology Photo Station 6.7.3-3432 / 6.3-2967 - Remote Code Execution
view exploit source exploit_dbverifiedtype webappsauthor Kacper Szurekpublished 2017-08-08catalog exploit_db
01
exploited CVEs (5)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-11155US | high7.5 | Exploit | ||
An information exposure vulnerability in index.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to obtain sensitive system information via unspe… | ||||
| CVE-2017-11154US | high7.2 | Exploit | ||
Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts vi… | ||||
| CVE-2017-11153US | critical9.8 | Exploit | ||
Deserialization vulnerability in synophoto_csPhotoMisc.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to gain administrator privileges via a c… | ||||
| CVE-2017-11152US | high7.5 | Exploit | ||
Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to write arbitrary files via the path p… | ||||
| CVE-2017-11151US | critical9.8 | Exploit | ||
A vulnerability in synotheme_upload.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to upload arbitrary files without authentication via the lo… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan