CVE-2011-4340

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via 1 the profile parameter to extensions/profiledevkit/content/content.profile.php, as...

IBM Lotus Symphony Image Object Integer Overflow Vulnerability - Linux

IBM Lotus Symphony is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Symphony Image Object Integer Overflow Vulnerability - Windows

IBM Lotus Symphony is prone to an integer overflow vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Integer overflow

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...

CVE-2012-0192

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...

CVE-2012-0192

Multiple integer overflows in vclmi.dll in the visual class library module in IBM Lotus Symphony before 3.0.1 might allow remote attackers to execute arbitrary code via an embedded 1 JPEG or 2 PNG image object in a Symphony document that triggers a heap-based buffer overflow, as demonstrated by a...

CVE-2012-0192

IBM Lotus Symphony

KLA10205 ACE vulnerability in IBM Lotus Symphony

Multiple integer overflows were found in IBM Lotus Symphony. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed Symphony document. Original advisories - Related products IBM-Lotus-Symphony CVE list...

XSS and SQL Injection Vulnerabilities on Symphony CMS 2.2.3

Information -------------------- Name : XSS and SQL Injection Vulnerabilities on Symphony CMS Software : Symphony CMS 2.2.3 and possibly below Vendor Homepage : http://symphony-cms.com Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Mesut Timur mesut a...

Symphony CMS 2.2.3 Cross Site Scripting / SQL Injection

Information -------------------- Name : XSS and SQL Injection Vulnerabilities on Symphony CMS Software : Symphony CMS 2.2.3 and possibly below Vendor Homepage : http://symphony-cms.com Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Mesut Timur Advisor...

Symphony 2.2.3 - symphonypublishimages?filter Cross-Site Scripting

Symphony 2.2.3 - symphonypublishimages?filter Cross-Site Scripting source: https://www.securityfocus.com/bid/50470/info Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data...

Symphony 2.2.3 - '/symphony/publish/images?filter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/50470/info Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

Symphony 2.2.3 - '/symphony/publish/comments?filter' SQL Injection

source: https://www.securityfocus.com/bid/50470/info Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

Symphony 2.2.3 - symphonypublishcomments?filter SQL Injection

Symphony 2.2.3 - symphonypublishcomments?filter SQL Injection source: https://www.securityfocus.com/bid/50470/info Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting...

IBM Lotus Symphony Version Detection (Linux)

This script finds the installed IBM Lotus Symphony version and saves the result in KB. OpenVAS Vulnerability Test $Id: gbibmlotussymphonydetectlin.nasl 7822 2017-11-20 08:46:09Z cfischer $ IBM Lotus Symphony Version Detection Linux Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone Networks...

IBM Lotus Symphony Multiple Vulnerabilities (Linux)

This host is installed with IBM Lotus Symphony and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmlotussymphonymultvulnlin.nasl 7044 2017-09-01 11:50:59Z teissa $ IBM Lotus Symphony Multiple Vulnerabilities Linux Authors: Sooraj KS Copyright: Copyright c 20...

IBM Lotus Symphony Multiple Vulnerabilities (Windows)

This host is installed with IBM Lotus Symphony and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbibmlotussymphonymultvulnwin.nasl 7024 2017-08-30 11:51:43Z teissa $ IBM Lotus Symphony Multiple Vulnerabilities Windows Authors: Sooraj KS Copyright: Copyright c...

IBM Lotus Symphony Multiple Vulnerabilities - Windows

IBM Lotus Symphony is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Symphony Multiple Vulnerabilities - Linux

IBM Lotus Symphony is prone to multiple unspecified vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

IBM Lotus Symphony Detection (Linux/Unix SSH Login)

This script finds the installed IBM Lotus Symphony version. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...