PT-2012-1865

Name of the Vulnerable Software and Affected Versions Symphony CMS versions prior to 2.2.4 Description The issue allows remote authenticated users with Author permissions to execute arbitrary SQL commands via the filter parameter to 1 "symphony/publish/comments" or 2 "symphony/publish/images" API...