EUVD-2017-17817

Malware in sbrugna...

CVE-2017-8876

Symphony 2 2.6.11 has XSS in the metanavigationgroup parameter to content/content.blueprintssections.php...

PT-2017-18598

Name of the Vulnerable Software and Affected Versions Symphony 2 version 2.6.11 Description The issue concerns a problem with the metanavigation group parameter in the content/content.blueprintssections.php file, which can lead to XSS. Recommendations For Symphony 2 version 2.6.11, avoid using th...

CVE-2015-8376: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Navigation Group, or 3 Label parameter to blueprints/sections/edit/1...

PT-2016-3897

Name of the Vulnerable Software and Affected Versions Symphony CMS version 2.6.3 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. The vulnerable parameters include the Name,...