CVE-2017-7694

Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor...

CVE-2017-7694

Symphony CMS

CVE-2017-7694

Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor...

symphony-mobile.com XSS vulnerability

Vulnerable URL: https://www.symphony-mobile.com/product-details.php?id=193...

Symphony cross-site scripting vulnerability (CNVD-2017-04650)

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in publish/notes/edit//saved/URI in Symphony version 2.6.9. An attacker can exploit this vulnerability...

Symphony Cross-Site Scripting Vulnerability

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in the publish/articles/new/ URI in Symphony version 2.6.11. A remote attacker can exploit this...

Design/Logic Flaw

Symphony 2.6.9 has XSS in publish/notes/edit//saved/ via the bottom form field...

CVE-2017-6067

Symphony 2.6.9 has XSS in publish/notes/edit//saved/ via the bottom form field...

CVE-2017-6067

Symphony 2.6.9 has XSS in publish/notes/edit//saved/ via the bottom form field...

CVE-2017-6067

Summary of CVE-2017-6067 : Symphony CMS 2.6.9 is vulnerable to a cross-site scripting (XSS) flaw in the page path publish/notes/edit/##/saved/ via the bottom form field. The issue is confirmed across multiple sources (CNVD/NVD OSV/OpenVAS) and is described as an XSS vulnerability with the affecte...

CVE-2017-6067

Symphony 2.6.9 has XSS in publish/notes/edit//saved/ via the bottom form field...

Symphony Directory Traversal Vulnerability

Symphony CMS is a content management system CMS developed in PHP and MySQL. The system supports search engine optimization, module extensions and more. Symphony suffers from a directory traversal vulnerability that stems from the application failing to adequately validate user input. A remote...

Symphony cross-site scripting vulnerability (CNVD-2017-01078)

Symphony CMS is a content management system CMS developed in PHP and MySQL. The system supports search engine optimization, module extension and so on. A cross-site scripting attack vulnerability exists in Symphony CMS, which stems from a failure to properly validate user input. An attacker could...

Symphony CMS < 2.6.10 Cross-Site Scripting and Directory Traversal Vulnerability

Symphony CMS is prone to a cross-site scripting and directory traversal vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Cross site scripting

Cross-site scripting XSS vulnerability in template/usererror.missingextension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-folder parameter...

CVE-2017-5541

Directory traversal vulnerability in template/usererror.missingextension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. dot dot in the existing-folder and new-folder parameters...

Directory traversal

Directory traversal vulnerability in template/usererror.missingextension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. dot dot in the existing-folder and new-folder parameters...

CVE-2017-5541

Directory traversal vulnerability in template/usererror.missingextension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. dot dot in the existing-folder and new-folder parameters...

CVE-2017-5542

Cross-site scripting XSS vulnerability in template/usererror.missingextension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-folder parameter...

CVE-2017-5542

Symphony CMS Logitech? No. This CVE (CVE-2017-5542) affects Symphony CMS up to version 2.6.9, where a cross-site scripting (XSS) flaw exists in template/usererror.missing_extension.php. The vulnerability allows an attacker to inject arbitrary web script or HTML through the existing-folder paramet...