Permissive regular expression vulnerability in synophotodsmuser in Synology Photo Station before 6.8.5-3471 and before 6.3-2975 allows remote authenticated users to conduct privilege escalation attacks via the fullname parameter.

A design flaw in authentication in Synology Photo Station 6.0-2528 through 6.7.1-3419 allows local users to obtain credentials via cmdline. Synology Photo Station employs the synophotodsmuser program to authenticate username and password by "synophotodsmuser --auth USERNAME PASSWORD", and local users are able to obtain credentials by sniffing "/proc//cmdline".