description: Unrestricted file upload vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to create arbitrary PHP scripts via the type parameter.
problem types: Unrestricted Upload of File with Dangerous Type (CWE-434)
affected:
{
product: Synology Photo Station
vendor: Synology
versions:
status: affected, version: before 6.7.3-3432 and 6.3-2967
}