PT-2011-4179

Name of the Vulnerable Software and Affected Versions IBM Lotus Symphony versions prior to 3 FP3 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by exploiting the DataPilot feature with a large .xls spreadsheet containing an invalid...

CVE-2011-2884: Undefined Security Weakness

Multiple unspecified vulnerabilities in IBM Lotus Symphony 3 before FP3 have unknown impact and attack vectors, related to "critical security vulnerability issues."...

CVE-2011-2887: Undefined Security Weakness

IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service application crash via a certain sample document...

CVE-2011-2885: Undefined Security Weakness

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application crash via the sample .doc document that incorporates a user-defined toolbar...

CVE-2011-2893: Undefined Security Weakness

The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service application crash via a large .xls spreadsheet with an invalid Value reference...

PT-2011-4172

Name of the Vulnerable Software and Affected Versions IBM Lotus Symphony versions 3 before FP3 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by using a .docx document with empty bullet styles for parent bullets. Recommendations For...

CVE-2011-2888: Undefined Security Weakness

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application hang via complex graphics in a presentation...

CVE-2011-2886: Undefined Security Weakness

IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service application crash via a .docx document with empty bullet styles for parent bullets...

Symphony token Parameter SQL Injection

The version of Symphony hosted on the remote web server fails to sanitize input to the 'token' parameter when 'action' is set to 'resetpass' before using it in the 'content.login.php' script to construct a database query. An unauthenticated, remote attacker can exploit this issue to manipulate...

Symphony CMS 2.1.2 Blind SQL Injection

-------------------------------------------------------------------------------------------- 20110424 - Justanotherhacker.com : Symphony-cms blind sql injection JAHx111 - http://www.justanotherhacker.com/advisories/JAHx111.txt...

Symphony CMS 2.1.2 Blind SQL Injection

Exploit for php platform in category web applications Symphony is a web-based content management system CMS that enables users to create and manage websites and web applications of all shapes and sizes?from the simplest of blogs to bustling news sites and feature-packed social networks. Taken fro...

Symphony CMS 2.1.2 - Blind SQL Injection

-------------------------------------------------------------------------------------------- 20110424 - Justanotherhacker.com : Symphony-cms blind sql injection JAHx111 - http://www.justanotherhacker.com/advisories/JAHx111.txt...

Symphony CMS 2.1.2 - Blind SQL Injection

Symphony CMS 2.1.2 - Blind SQL Injection -------------------------------------------------------------------------------------------- 20110424 - Justanotherhacker.com : Symphony-cms blind sql injection JAHx111 - http://www.justanotherhacker.com/advisories/JAHx111.txt...

IBM Lotus Symphony Detection (Windows SMB Login)

Detects the installed version of IBM Lotus Symphony on Windows. The script logs in via smb, searches for IBM Lotus Symphony in the registry, gets the from registry. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C b...

sfWpCumulusPlugin For Symphony Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting vulnerability in plugin sfWpCumulusPlugin for symfony. ------------------------- Affected products: ------------------------- Vulnerable are all versions of sfWpCumulusPlugin. ---------- Details: ---------- This XSS is similar to XSS...

CVE-2010-3457

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 fieldswebsite parameter in the post comments feature in articles/a-primer-to-symphony-2s-default-theme/ or 2 send-emailrecipient parameter to...

CVE-2010-3458

SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute arbitrary SQL commands via the send-emailrecipient parameter to about/. NOTE: some of these details are obtained from third party information...

Sql injection

SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute arbitrary SQL commands via the send-emailrecipient parameter to about/. NOTE: some of these details are obtained from third party information...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 fieldswebsite parameter in the post comments feature in articles/a-primer-to-symphony-2s-default-theme/ or 2 send-emailrecipient parameter to...

CVE-2010-3457

Multiple cross-site scripting XSS vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 fieldswebsite parameter in the post comments feature in articles/a-primer-to-symphony-2s-default-theme/ or 2 send-emailrecipient parameter to...