Symphony CMS - Local File Inclusion

============================================================================================================= o Symphony CMS Local File Inclusion Vulnerability Software : Symphony CMS version 2.0.7 Download : http://symphony-cms.com/download/releases/current/ Author : AntiSecurity NoGe Vrs-hCk...

CVE-2008-3592

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing t...

Unrestricted file upload

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing t...

CVE-2008-3591

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the symauth cookie in a /publish/filemanager/ request to index.php...

CVE-2008-3591

The CVE-2008-3591 issue affects Twentyone Degrees Symphony 1.7.01 and earlier, where the lib/class.admin.php login path processes the sym_auth cookie in a database query. The underlying flaw is a SQL injection that allows an attacker to alter queries, potentially bypass authentication and gain ad...

CVE-2008-3591

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the symauth cookie in a /publish/filemanager/ request to index.php...

CVE-2008-3592

CVE-2008-3592 describes an unrestricted file upload vulnerability in the File Manager of the Twentyone Degrees Symphony admin panel (versions 1.7.01 and earlier). The flaw permits remote attackers to execute arbitrary code by uploading a file with an executable extension to a destination director...

CVE-2008-3591: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the symauth cookie in a /publish/filemanager/ request to index.php...

CVE-2008-3592: Improper Control of Generation of Code

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing t...

Symphony sym_auth Cookie SQL Injection

The version of Symphony installed on the remote host fails to sanitize user-supplied input to the 'symauth' cookie before using it in the 'login' function in 'lib/class.admin.php' in a database query. An unauthenticated attacker may be able to exploit this issue to manipulate database queries to...

Symphony <= 1.7.01 (non-patched) Remote Code Execution Exploit

No description provided by source. ?php Symphony = 1.7.01 non-patched Remote Command Execution Exploit by Raz0r http://Raz0r.name Software site: http://21degrees.com.au/ works regardless magicquotesgpc echo "-----------------------------------------------------------------\n"; echo "Symphony =...

Symphony 1.7.01 (non-patched) - Remote Code Execution

db-fetchRow0, $sql; ... ... ifisset$COOKIESYMCOOKIE $args = unserialize$COOKIESYMCOOKIE; $result = $this-login$args'username', $args'password', true, false; ------------------/source code--------------------- password value from cookie is not properly sanitized so the code above is vulnerable to ...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...

Lotus Expeditor cai URI handler command injection

Added: 06/20/2008 CVE: CVE-2008-1965 BID: 28926 OSVDB: 44868 Background Lotus Expeditor is a desktop integration framework used by Lotus products including Lotus Symphony. Problem Lotus Expeditor registers a handler for cai: URIs which passes arbitrary arguments to rcplauncher.exe. This allows...