2 matches found
Sql injection
SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the symauth cookie in a /publish/filemanager/ request to index.php...
7.5CVSS8.7AI score0.02082EPSS
SaveExploits1References5Affected Software1
CVE-2008-3591: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the symauth cookie in a /publish/filemanager/ request to index.php...
7.5CVSS6.4AI score0.02082EPSS
SaveExploits1References2
20