description: Files or directories accessible to external parties vulnerability in picasa.php in Synology Photo Station before 6.8.1-3458 and before 6.3-2970 allows remote attackers to obtain arbitrary files via prog_id field.
problem types: Files or Directories Accessible to External Parties (CWE-552)
affected:
{
product: Photo Station
vendor: Synology
versions:
status: affected, version: before 6.8.1-3458
status: affected, version: before 6.3-2970
}