CVE-2015-8766

Symphony CMS is affected by CVE-2015-8766. Multiple XSS flaws exist in content/systempreferences.php prior to version 2.6.4, allowing remote attackers to inject arbitrary scripts or HTML via parameters such as email_sendmail[from_name], email_sendmail[from_address], email_smtp[from_name], email_s...

CVE-2015-8376

CVE-2015-8376 affects Symphony CMS 2.6.3, where multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the Name, Navigation Group, or Label parameters to blueprints/sections/edit/1. The root cause is insufficient input filtering in th...

Multiple Cross-Site Scripting Vulnerabilities in Symphony

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. Multiple cross-site scripting vulnerabilities exist in Symphony version 2.6.3. Due to the program fails to adequately filter user-submitted input...

Symphony CMS Cross-Site Scripting Vulnerability (CNVD-2015-03920)

Symphony CMS is a content management system CMS developed in PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in Symphony CMS version 2.6.2, which stems from the system/authors URI failing to adequately filter t...

CVE-2015-4661

Cross-site scripting XSS vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the sort parameter to system/authors...

Cross site scripting

Cross-site scripting XSS vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the sort parameter to system/authors...

CVE-2015-4661

Cross-site scripting XSS vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the sort parameter to system/authors...

CVE-2015-4661

CVE-2015-4661 affects Symphony CMS 2.6.2. A cross-site scripting (XSS) vulnerability exists in the sort parameter used by the authors search in system/authors, caused by insufficient input filtering. This can allow remote attackers to inject arbitrary web script or HTML. Based on the cited source...

Symphony CMS XSS Vulnerability [Corrected Post]

Correction of Vendor Info for Symphony CMS XSS Vulnerability POST on Jun 08 ============================================= + Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-SYMPHONY0606.txt Vendor:...

Symphony CMS XSS Vulnerability

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/ Vendor: ================================ http://www.silverstripe.org/software/download Product: ================================ SilverStripe CMS & Framework v3.1.13 Advisory...

Symphony CMS 2.6.2

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-SYMPHONY0606.txt Vendor: ================================ www.getsymphony.com/download/ Product: ================================ Symphony CMS 2.6.2 Advisory Information:...

Symphony CMS 2.6.2 Cross Site Scripting

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-SYMPHONY0606.txt Vendor: ================================ www.getsymphony.com/download/ Product: ================================ Symphony CMS 2.6.2 Advisory Information:...

symphony cms 2.3 - Multiple Vulnerabilities

No description provided by source. Symphony cms 2.3 multiple vulnerabilities -------------------------------------------------------------------------------------------- 20121017 - Justanotherhacker.com : Symphony cms - Multiple vulnerabilities JAHx122 -...

Symphony CMS 2.1.2 - Blind SQL Injection

No description provided by source. -------------------------------------------------------------------------------------------- 20110424 - Justanotherhacker.com : Symphony-cms blind sql injection JAHx111 - http://www.justanotherhacker.com/advisories/JAHx111.txt...

CVE-2013-2559

SQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter to system/authors/. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands...

Sql injection

SQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter to system/authors/. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the sort parameter to system/authors/, related to CVE-2013-2559...

CVE-2013-7346

Symphony CMS vulnerable before 2.3.2 to a Cross-Site Request Forgery (CSRF) that can hijack administrator authentication to perform SQL injection via the sort parameter in system/authors/. The issue is described as allowing remote (potentially unauthenticated via CSRF) execution of arbitrary SQL ...

CVE-2013-2559

Symphony CMS (before 2.3.2) is affected by a SQL injection in the sort parameter to system/authors/ that can be triggered by remote authenticated users; note that CSRF can enable remote unauthenticated attackers to execute arbitrary SQL commands. The issue is linked to CVE-2013-2559 and is also d...

CVE-2013-2559

SQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to execute arbitrary SQL commands via the sort parameter to system/authors/. NOTE: this can be leveraged using CSRF to allow remote unauthenticated attackers to execute arbitrary SQL commands...