Symphony CMS 跨站脚本漏洞

No description provided by source...

Symphony CMS Cross-Site Scripting Vulnerability (CNVD-2016-00187)

Symphony CMS is a content management system CMS developed in PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in the content/content.systempreferences.php script in Symphony CMS versions prior to 2.6.4, which...

CVE-2015-8766

Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...

CVE-2015-8376

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Navigation Group, or 3 Label parameter to blueprints/sections/edit/1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Navigation Group, or 3 Label parameter to blueprints/sections/edit/1...

CVE-2015-8376

CVE-2015-8376 affects Symphony CMS 2.6.3, where multiple cross-site scripting (XSS) vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the Name, Navigation Group, or Label parameters to blueprints/sections/edit/1. The root cause is insufficient input filtering in th...

CVE-2015-8766

Symphony CMS is affected by CVE-2015-8766. Multiple XSS flaws exist in content/systempreferences.php prior to version 2.6.4, allowing remote attackers to inject arbitrary scripts or HTML via parameters such as email_sendmail[from_name], email_sendmail[from_address], email_smtp[from_name], email_s...

CVE-2015-8766

Multiple cross-site scripting XSS vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the 1 emailsendmailfromname, 2 emailsendmailfromaddress, 3 emailsmtpfromname, 4 emailsmtpfromaddress, 5...

CVE-2015-8376

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.6.3 allow remote attackers to inject arbitrary web script or HTML via the 1 Name, 2 Navigation Group, or 3 Label parameter to blueprints/sections/edit/1...

Multiple Cross-Site Scripting Vulnerabilities in Symphony

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. Multiple cross-site scripting vulnerabilities exist in Symphony version 2.6.3. Due to the program fails to adequately filter user-submitted input...

Symphony HTML Injection Vulnerability

Symphony is a content management system CMS developed using PHP and MySQL. The system supports search engine optimization, module extensions and more. An HTML injection vulnerability exists in Symphony version 2.6.3, which stems from the program not adequately filtering user-submitted input. When...

Symphony CMS Cross-Site Scripting Vulnerability (CNVD-2015-03920)

Symphony CMS is a content management system CMS developed in PHP and MySQL. The system supports search engine optimization, module extensions and more. A cross-site scripting vulnerability exists in Symphony CMS version 2.6.2, which stems from the system/authors URI failing to adequately filter t...

CVE-2015-4661

Cross-site scripting XSS vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the sort parameter to system/authors...

Cross site scripting

Cross-site scripting XSS vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the sort parameter to system/authors...

CVE-2015-4661

CVE-2015-4661 affects Symphony CMS 2.6.2. A cross-site scripting (XSS) vulnerability exists in the sort parameter used by the authors search in system/authors, caused by insufficient input filtering. This can allow remote attackers to inject arbitrary web script or HTML. Based on the cited source...

CVE-2015-4661

Cross-site scripting XSS vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the sort parameter to system/authors...

Symphony sort' parameter cross-site scripting vulnerability

Symphony is a content management system CMS developed using PHP+MySQL. A cross-site scripting vulnerability exists in Symphony due to the program failing to adequately filter user-submitted input. The vulnerability allows an attacker to steal cookie-based authentication and execute arbitrary code...

Symphony CMS XSS Vulnerability [Corrected Post]

Correction of Vendor Info for Symphony CMS XSS Vulnerability POST on Jun 08 ============================================= + Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-SYMPHONY0606.txt Vendor:...

Symphony CMS 2.6.2

Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-SYMPHONY0606.txt Vendor: ================================ www.getsymphony.com/download/ Product: ================================ Symphony CMS 2.6.2 Advisory Information:...