Symphony CMS Directory traversal vulnerability

Symphony CMS is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symphony 2.0.6 mode Parameter Local File Inclusion

The Symphony install on the remote host fails to sanitize user- supplied input to the 'mode' parameter in 'index.php' before using it to include PHP code. An unauthenticated attacker can exploit this vulnerability to view arbitrary files or possibly to execute arbitrary PHP code on the remote hos...

Symphony Detection

Symphony, an XSLT-powered, open source content management system, is hosted on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46818; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

CVE-2010-2143

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

Directory traversal

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

CVE-2010-2143

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

CVE-2010-2143

CVE-2010-2143 : Symphony CMS is vulnerable to a directory traversal in the index.php file’s mode parameter, allowing remote attackers to read arbitrary files and potentially impact the server. Affected: Symphony CMS 2.0.7 (and references to 2.0.6), with root cause described as unsanitized input d...

Symphony CMS Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================= o Symphony CMS Local File Inclusion Vulnerability Software : Symphony CMS version 2.0.7 Download : http://symphony-cms.com/download/releases/current/...

Symphony CMS 2.0.7 Local File Inclusion

============================================================================================================= o Symphony CMS Local File Inclusion Vulnerability Software : Symphony CMS version 2.0.7 Download : http://symphony-cms.com/download/releases/current/ Author : AntiSecurity NoGe Vrs-hCk...

Symphony CMS - Local File Inclusion

Symphony CMS - Local File Inclusion ============================================================================================================= o Symphony CMS Local File Inclusion Vulnerability Software : Symphony CMS version 2.0.7 Download : http://symphony-cms.com/download/releases/current/...

Symphony CMS Local File Inclusion Vulnerability

Exploit for php platform in category web applications =============================================== Symphony CMS Local File Inclusion Vulnerability ===============================================...

Symphony CMS - Local File Inclusion

============================================================================================================= o Symphony CMS Local File Inclusion Vulnerability Software : Symphony CMS version 2.0.7 Download : http://symphony-cms.com/download/releases/current/ Author : AntiSecurity NoGe Vrs-hCk...

CVE-2008-3592

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing t...

Unrestricted file upload

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing t...

CVE-2008-3591

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the symauth cookie in a /publish/filemanager/ request to index.php...

CVE-2008-3591

The CVE-2008-3591 issue affects Twentyone Degrees Symphony 1.7.01 and earlier, where the lib/class.admin.php login path processes the sym_auth cookie in a database query. The underlying flaw is a SQL injection that allows an attacker to alter queries, potentially bypass authentication and gain ad...

CVE-2008-3591

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the symauth cookie in a /publish/filemanager/ request to index.php...

CVE-2008-3592

CVE-2008-3592 describes an unrestricted file upload vulnerability in the File Manager of the Twentyone Degrees Symphony admin panel (versions 1.7.01 and earlier). The flaw permits remote attackers to execute arbitrary code by uploading a file with an executable extension to a destination director...

Symphony sym_auth Cookie SQL Injection

The version of Symphony installed on the remote host fails to sanitize user-supplied input to the 'symauth' cookie before using it in the 'login' function in 'lib/class.admin.php' in a database query. An unauthenticated attacker may be able to exploit this issue to manipulate database queries to...

Symphony <= 1.7.01 (non-patched) Remote Code Execution Exploit

No description provided by source. ?php Symphony = 1.7.01 non-patched Remote Command Execution Exploit by Raz0r http://Raz0r.name Software site: http://21degrees.com.au/ works regardless magicquotesgpc echo "-----------------------------------------------------------------\n"; echo "Symphony =...