CVE-2010-3458

SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute arbitrary SQL commands via the send-emailrecipient parameter to about/. NOTE: some of these details are obtained from third party information...

CVE-2010-3457

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 fieldswebsite parameter in the post comments feature in articles/a-primer-to-symphony-2s-default-theme/ or 2 send-emailrecipient parameter to...

Sql injection

SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute arbitrary SQL commands via the send-emailrecipient parameter to about/. NOTE: some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 fieldswebsite parameter in the post comments feature in articles/a-primer-to-symphony-2s-default-theme/ or 2 send-emailrecipient parameter to...

CVE-2010-3458

SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute arbitrary SQL commands via the send-emailrecipient parameter to about/. NOTE: some of these details are obtained from third party information...

CVE-2010-3457

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 fieldswebsite parameter in the post comments feature in articles/a-primer-to-symphony-2s-default-theme/ or 2 send-emailrecipient parameter to...

CVE-2010-3458

CVE-2010-3458 describes a SQL injection in Symphony CMS (versions 2.0.7 and 2.1.1) where remote attackers could execute arbitrary SQL via the send-email[recipient] parameter to about/. The OpenVAS entry also notes a broader set of vulnerabilities for Symphony

CVE-2010-3457

CVE-2010-3457 affects Symphony CMS versions 2.0.7 and 2.1.1, with concrete XSS flaws exploitable via the fields[website] parameter in post comments and the send-email[recipient] parameter to the about/ page. The vulnerabilities allow remote attackers to inject arbitrary web script or HTML. No exp...

Symphony <= 2.1.1 Multiple Vulnerabilities

Symphony is prone to a SQL injection SQLi vulnerability and an HTML injection vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Symphony CMS local file inclusion vulnerability-vulnerability warning-the black bar safety net

Download: http://symphony-cms.com/download/releases/current/ exp:http://localhost/path/index. php? mode=LFI poc:http://localhost/index. php? mode=../../../../../../../../../../../../../../../etc/passwd%0 0...

Symphony CMS Detection (HTTP)

This script finds the running Symphony CMS version. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Symphony CMS Directory traversal vulnerability

Symphony CMS is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symphony 2.0.6 mode Parameter Local File Inclusion

The Symphony install on the remote host fails to sanitize user- supplied input to the 'mode' parameter in 'index.php' before using it to include PHP code. An unauthenticated attacker can exploit this vulnerability to view arbitrary files or possibly to execute arbitrary PHP code on the remote hos...

CVE-2010-2143

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

Directory traversal

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

CVE-2010-2143

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

CVE-2010-2143

CVE-2010-2143 : Symphony CMS is vulnerable to a directory traversal in the index.php file’s mode parameter, allowing remote attackers to read arbitrary files and potentially impact the server. Affected: Symphony CMS 2.0.7 (and references to 2.0.6), with root cause described as unsanitized input d...

Symphony CMS Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================= o Symphony CMS Local File Inclusion Vulnerability Software : Symphony CMS version 2.0.7 Download : http://symphony-cms.com/download/releases/current/...

Symphony CMS - Local File Inclusion

Symphony CMS - Local File Inclusion ============================================================================================================= o Symphony CMS Local File Inclusion Vulnerability Software : Symphony CMS version 2.0.7 Download : http://symphony-cms.com/download/releases/current/...

Symphony CMS Local File Inclusion Vulnerability

Exploit for php platform in category web applications =============================================== Symphony CMS Local File Inclusion Vulnerability ===============================================...