CVE-2010-3457: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 fieldswebsite parameter in the post comments feature in articles/a-primer-to-symphony-2s-default-theme/ or 2 send-emailrecipient parameter to...

Symphony <= 2.1.1 Multiple Vulnerabilities

Symphony is prone to a SQL injection SQLi vulnerability and an HTML injection vulnerability because it fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Symphony 2.0.7 SQL Injection / Cross Site Scripting

Symphony 2.0.7 Multiple Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://downloads.symphony-cms.com/symphony-package/36030/symphony-2.0.7.zip - CMS: XSLT-powered open source content management...

symphony 2.0.7 - Multiple Vulnerabilities

symphony 2.0.7 - Multiple Vulnerabilities Symphony 2.0.7 Multiple Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://downloads.symphony-cms.com/symphony-package/36030/symphony-2.0.7.zip - CMS:...

symphony 2.0.7 - Multiple Vulnerabilities

Symphony 2.0.7 Multiple Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://downloads.symphony-cms.com/symphony-package/36030/symphony-2.0.7.zip - CMS: XSLT-powered open source content management...

Symphony 2.0.7 Multiple Vulnerabilities

Exploit for php platform in category web applications ======================================= Symphony 2.0.7 Multiple Vulnerabilities ======================================= Symphony 2.0.7 Multiple Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.c...

Symphony CMS local file inclusion vulnerability-vulnerability warning-the black bar safety net

Download: http://symphony-cms.com/download/releases/current/ exp:http://localhost/path/index. php? mode=LFI poc:http://localhost/index. php? mode=../../../../../../../../../../../../../../../etc/passwd%0 0...

Symphony CMS Detection (HTTP)

This script finds the running Symphony CMS version. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Symphony CMS Directory traversal vulnerability

Symphony CMS is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Symphony 2.0.6 mode Parameter Local File Inclusion

The Symphony install on the remote host fails to sanitize user- supplied input to the 'mode' parameter in 'index.php' before using it to include PHP code. An unauthenticated attacker can exploit this vulnerability to view arbitrary files or possibly to execute arbitrary PHP code on the remote hos...

Symphony Detection

Symphony, an XSLT-powered, open source content management system, is hosted on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid46818; scriptversion"1.9"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01";...

CVE-2010-2143

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

Directory traversal

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

CVE-2010-2143

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

CVE-2010-2143

CVE-2010-2143 : Symphony CMS is vulnerable to a directory traversal in the index.php file’s mode parameter, allowing remote attackers to read arbitrary files and potentially impact the server. Affected: Symphony CMS 2.0.7 (and references to 2.0.6), with root cause described as unsanitized input d...

CVE-2010-2143: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. dot dot in the mode parameter...

Symphony CMS Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================= o Symphony CMS Local File Inclusion Vulnerability Software : Symphony CMS version 2.0.7 Download : http://symphony-cms.com/download/releases/current/...

Symphony CMS Local File Inclusion Vulnerability

Exploit for php platform in category web applications =============================================== Symphony CMS Local File Inclusion Vulnerability ===============================================...

Symphony CMS 2.0.7 Local File Inclusion

============================================================================================================= o Symphony CMS Local File Inclusion Vulnerability Software : Symphony CMS version 2.0.7 Download : http://symphony-cms.com/download/releases/current/ Author : AntiSecurity NoGe Vrs-hCk...

Symphony CMS - Local File Inclusion

Symphony CMS - Local File Inclusion ============================================================================================================= o Symphony CMS Local File Inclusion Vulnerability Software : Symphony CMS version 2.0.7 Download : http://symphony-cms.com/download/releases/current/...