CVE-2013-6305

IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key...

Design/Logic Flaw

IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key...

CVE-2013-6305

IBM Platform Symphony 5.2 before build 229037 and 6.1.0.1 before build 229073 uses the same credentials encryption key across different customers' installations, which makes it easier for context-dependent attackers to obtain sensitive information by leveraging knowledge of this key...

CVE-2013-6305

CVE-2013-6305 affects IBM Platform Symphony 5.2 (before build 229037) and 6.1.0.1 (before build 229073). The root cause is reuse of the same credentials encryption key across different customers’ installations, enabling context-dependent attackers to obtain sensitive information by leveraging kno...

IBM Platform Symphony SOAP Requests Processing Buffer Overflow (CVE-2013-5387)

A buffer overflow vulnerability has been reported in IBM Platform Symphony...

CVE-2013-5387

Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service process crash or hang via a malformed SOAP request with a large amount of request data...

Buffer overflow

Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service process crash or hang via a malformed SOAP request with a large amount of request data...

CVE-2013-5387

CVE-2013-5387 affects IBM Platform Symphony; multiple sources link a SOAP handling issue leading to a buffer overflow. ZDI-14-017 explicitly states a remote code execution vulnerability in IBM Platform Symphony DE caused by malformed SOAP requests, allowing code execution in the target process (u...

CVE-2013-5387

Buffer overflow in IBM Platform Symphony 5.2, 6.1, and 6.1.1 allows remote attackers to cause a denial of service process crash or hang via a malformed SOAP request with a large amount of request data...

SQL Injection Vulnerability in Symphony

Advisory ID: HTB23148 Product: Symphony Vendor: http://getsymphony.com/ Vulnerable Versions: 2.3.1 and probably prior Tested Version: 2.3.1 Vendor Notification: March 13, 2013 Vendor Patch: March 24, 2013 Public Disclosure: April 3, 2013 Vulnerability Type: SQL Injection CWE-89 CVE Reference:...

Symphony 2.3.1 SQL Injection Vulnerability

Symphony version 2.3.1 suffers from a remote SQL injection vulnerability. Product: Symphony Vendor: http://getsymphony.com/ Vulnerable Versions: 2.3.1 and probably prior Tested Version: 2.3.1 Vendor Notification: March 13, 2013 Vendor Patch: March 24, 2013 Public Disclosure: April 3, 2013...

Symphony - sort SQL Injection

Symphony - sort SQL Injection source: https://www.securityfocus.com/bid/58843/info Symphony is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Symphony 2.3.1 SQL Injection

Advisory ID: HTB23148 Product: Symphony Vendor: http://getsymphony.com/ Vulnerable Versions: 2.3.1 and probably prior Tested Version: 2.3.1 Vendor Notification: March 13, 2013 Vendor Patch: March 24, 2013 Public Disclosure: April 3, 2013 Vulnerability Type: SQL Injection CWE-89 CVE Reference:...

Symphony - 'sort' SQL Injection

source: https://www.securityfocus.com/bid/58843/info Symphony is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied input before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access or modify dat...

SQL Injection Vulnerability in Symphony

High-Tech Bridge Security Research Lab discovered SQL injection vulnerability in Symphony, which can be exploited to alter SQL requests to database of the vulnerable application. 1 SQL Injection in Symphony: CVE-2013-2559 The vulnerability exists due to insufficient filtration of "sort" HTTP GET...

IBM Lotus Symphony < 3.0.1 Fix Pack 2 Multiple Vulnerabilities

The version of IBM Lotus Symphony is a version prior to 3.0.1 Fix Pack 2. Such versions are affected by multiple vulnerabilities : - Flaws exist in the way certain XML components are processed for external entities in ODF documents. These flaws can be utilized to access and inject the content of...

Symphony Multiple Remote Security Vulnerabilities

Symphony is prone to multiple remote security vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symphony Password Retrieval Script XSS

The remote host is running a version of Symphony that is affected by a cross-site scripting vulnerability. The 'email' parameter of the '/symphony/login/retrieve-password/' script is not properly sanitized, and may allow an attacker to execute arbitrary script code in the browser of an unsuspecti...

Symphony CMS 2.3 - Multiple Vulnerabilities

Symphony CMS 2.3 - Multiple Vulnerabilities Symphony cms 2.3 multiple vulnerabilities -------------------------------------------------------------------------------------------- 20121017 - Justanotherhacker.com : Symphony cms - Multiple vulnerabilities JAHx122 -...

Symphony CMS 2.3 - Multiple Vulnerabilities

Symphony cms 2.3 multiple vulnerabilities -------------------------------------------------------------------------------------------- 20121017 - Justanotherhacker.com : Symphony cms - Multiple vulnerabilities JAHx122 - http://www.justanotherhacker.com/advisories/JAHx122.txt...