Skip to content
OpenAdvisories
Unscored CVE-2017-16772 EUVD-2017-7951GHSA-xx5j-hg4j-w6fh

Improper input validation vulnerability in SYNOPHOTO_Flickr_MultiUpload in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 all…

Published Mar 22, 2018 · Updated Sep 17, 2024 · Assigned by synology

Vendor: Synology Product: Photo Station

Description

Improper input validation vulnerability in SYNOPHOTO_Flickr_MultiUpload in Synology Photo Station before 6.8.3-3463 and before 6.3-2971 allows remote authenticated users to execute arbitrary codes via the prog_id parameter.

Affected products

VendorProductAffectedFixed
Synology Photo Station before 6.8.3-3463, before 6.3-2971 —

References