Symphony CMS Cross-Site Scripting Vulnerability (CNVD-2020-49577)

Symphony CMS is a PHP + MySQL based , using XML and XSLT as the backbone of the open source content management system . A cross-site scripting vulnerability exists in content/content.blueprintsevents.php in Symphony CMS 3.0.0. The vulnerability can be exploited by an attacker to conduct a...

Cross-Site Scripting (XSS)

Symphony CMS is susceptible to cross-site scripting XSS. Lack of sanitization for the name field to appendSubheading, allowing an attacker to inject malicious script through it...

CVE-2020-15071

content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...

CVE-2020-15071

content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...

CVE-2020-15071

content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...

Cross site scripting

content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...

CVE-2020-15071

content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields'name' to appendSubheading...

CVE-2020-15071

Symphony CMS 3.0.0 contains a Cross-Site Scripting (XSS) vulnerability in content/content.blueprintsevents.php where the name field used by appendSubheading is not properly sanitized, enabling injected scripts. Affected component: Symphony CMS 3.0.0; root cause: lack of input sanitization for fie...

Symphony CMS Cross-Site Scripting (CVE-2015-8376)

A cross site scripting vulnerability exists in Symphony CMS. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

Symphony CMS SQL Injection (CVE-2013-2559)

An SQL injection vulnerability exists in the Symphony CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

Symphony CMS Cross-Site Scripting (CVE-2015-8766)

A cross site scripting vulnerability exists in Symphony CMS. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

Symphony CMS Cross-Site Scripting (CVE-2010-3457)

A cross site scripting vulnerability exists in Symphony CMS. Successful exploitation of this vulnerability could allow attackers to execute arbitrary code on the affected system...

Symphony CMS SQL Injection (CVE-2010-3458)

An SQL injection vulnerability exists in the Symphony CMS. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2019-13187

The Rich Text Formatter Redactor extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php...

CVE-2019-13187

The Rich Text Formatter Redactor extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php...

Design/Logic Flaw

The Rich Text Formatter Redactor extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php...

CVE-2019-13187

CVE-2019-13187 corresponds to a vulnerability in the Rich Text Formatter (Redactor) extension for Symphony CMS, affecting the Redactor integration up to version 1.1.1. The issue is an unauthenticated arbitrary file upload in content.fileupload.php and content.imageupload.php, enabling an attacker...

CVE-2019-13187

The Rich Text Formatter Redactor extension through v1.1.1 for Symphony CMS has an Unauthenticated arbitrary file upload vulnerability in content.fileupload.php and content.imageupload.php...

Symphony CMS <= 2.7.6 XSS Vulnerability

Symphony CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross-site Scripting (XSS)

Symphony CMS is vulnerable to cross-site scripting XSS attacks. A malicious user can inject and execute arbitrary webscript in the URL through the sort parameters in system/authors...