CVE-2008-3591

2008-08-1123:00:00

mitre

www.cve.org

AI Score

8.3

Confidence

Low

EPSS

0.003

Percentile

68.3%

JSON

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the sym_auth cookie in a /publish/filemanager/ request to index.php.

References

overture21.com/forum/comments.php?DiscussionID=1823

secunia.com/advisories/31293

securityreason.com/securityalert/4137

www.securityfocus.com/bid/30477

www.exploit-db.com/exploits/6177