Symphony Communication ServicesHp Symphony 代码问题漏洞

Symphony is a PHP MySQL-based, open source content management system CMS that uses XML and XSLT as its backbone. symphonylibtoolkitclass.xmlelement.php in Symphony version 2.7.10 is vulnerable to XXE. An attacker could exploit this vulnerability to cause an information disclosure or denial of...

Symphony cross-site scripting vulnerability (CNVD-2017-07340)

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in the publish/articles/new/ URI in Symphony version 2.6.11. A remote attacker can exploit this...

Symphony cross-site scripting vulnerability (CNVD-2017-04650)

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in publish/notes/edit//saved/URI in Symphony version 2.6.9. An attacker can exploit this vulnerability...

CVE-2016-4309

Session fixation vulnerability in Symphony CMS 2.6.7, when session.useonlycookies is disabled, allows remote attackers to hijack web sessions via the PHPSESSID parameter...

Symphony HTML Injection Vulnerability

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. An HTML injection vulnerability exists in Symphony version 2.6.3, which stems from the program not adequately filtering user-submitted input. When...