CVE-2012-5574

lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request...

PT-2012-6032

Name of the Vulnerable Software and Affected Versions Symfony CMS versions prior to 1.4.20 Description The issue allows remote attackers to read arbitrary files via a crafted upload request. This is due to a flaw in the lib/form/sfForm.class.php file. Recommendations For versions prior to 1.4.20,...

CVE-2012-5574: Undefined Security Weakness

lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request...