PT-2017-16569

Name of the Vulnerable Software and Affected Versions Symphony CMS versions prior to 2.6.10 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the existing-folder parameter in the template/usererror.missing...

PT-2017-16568

Name of the Vulnerable Software and Affected Versions Symphony CMS versions prior to 2.6.10 Description The issue allows remote attackers to rename arbitrary files by exploiting a directory traversal vulnerability. This is achieved by using a .. dot dot in the existing-folder and new-folder...