CVE-2017-7694

🗓️ 11 Apr 2017 23:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 70 Views🌐 WEB

Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows authenticated remote attackers to execute PHP code and get a webshell from the back-end

Reporter	Title	Published	Views	Family All 11
CNVD	Symphony CMS Remote Code Execution Vulnerability	13 Apr 201700:00	–	cnvd
Cvelist	CVE-2017-7694	11 Apr 201723:00	–	cvelist
EUVD	EUVD-2017-16670	7 Oct 202500:30	–	euvd
Mend	CVE-2017-7694	11 Apr 201723:00	–	mend
NVD	CVE-2017-7694	11 Apr 201723:59	–	nvd
OpenVAS	Symphony CMS <= 2.6.11 RCE Vulnerability	19 Apr 201700:00	–	openvas
osv_cve	CVE-2017-7694	11 Apr 201723:59	–	osv_cve
Prion	Remote code execution	11 Apr 201723:59	–	prion
Positive Technologies	PT-2017-17892	11 Apr 201700:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2017-7694: Improper Control of Generation of Code	11 Apr 201700:00	–	rapid7

NVD

Node

getsymphony symphonyRange≤2.6.11

Source	Link
github	www.github.com/symphonycms/symphony-2/issues/2655
securityfocus	www.securityfocus.com/bid/97594
github	www.github.com/symphonycms/symphony-2/commit/e30a18f8f09dca836e141bf126a26e565c9a2bc7
math1as	www.math1as.com/symphonycms_2.7_exec.txt

Parameter	Position	Path	Description	CWE
datasource editor	request body	/admin/content/datasource/edit	Remote Code Execution via PHP code injection in the datasource editor.	CWE-94
event editor	request body	/admin/content/event/edit	Remote Code Execution via PHP code injection in the event editor.	CWE-94

17 Jun 2026 01:25Current

7.7High risk

Vulners AI Score7.7

CVSS 26.5

CVSS 38.8

EPSS0.04433

CWE-94