Lucene search
PRIOn knowledge basePRION:CVE-2013-7346HistoryMar 27, 2014 - 4:55 p.m.
Cross site request forgery (csrf)
2014-03-2716:55:00
PRIOn knowledge base
www.prio-n.com
4
8.6 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
33.8%
Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the sort parameter to system/authors/, related to CVE-2013-2559.
Related
cve
cve
CVE-2013-7346
2014-03-27 16:55:00
CVE-2013-2559
2014-03-27 16:55:00
cvelist
cvelist
CVE-2013-7346
2022-10-03 16:14:53
CVE-2013-2559
2014-03-27 16:00:00
securityvulns
securityvulns
SQL Injection Vulnerability in Symphony
2013-05-06 00:00:00
htbridge
htbridge
SQL Injection Vulnerability in Symphony
2013-03-13 00:00:00
prion
prion
Sql injection
2014-03-27 16:55:00
zdt
zdt
Symphony 2.3.1 SQL Injection Vulnerability
2013-04-04 00:00:00
checkpoint_advisories
checkpoint_advisories
Symphony CMS SQL Injection (CVE-2013-2559)
2020-06-16 00:00:00
packetstorm
packetstorm
Symphony 2.3.1 SQL Injection
2013-04-03 00:00:00
8.6 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
33.8%
Related for PRION:CVE-2013-7346