CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

OSV•added 2017/01/20 8:59 a.m.•22 views

CVE-2017-5542

Cross-site scripting XSS vulnerability in template/usererror.missingextension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-folder parameter...

6.1CVSS5.9AI score

SaveExploits0References3

Rapid7 Vulnerability Database (full)•added 2017/01/20 12:00 a.m.•4 views

CVE-2017-5542: Improper Neutralization of Input During Web Page Generation

6.1CVSS6AI score0.0117EPSS

SaveExploits0References2

Rapid7 Vulnerability Database (full)•added 2017/01/20 12:00 a.m.•3 views

CVE-2017-5541: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in template/usererror.missingextension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. dot dot in the existing-folder and new-folder parameters...

5.3CVSS6AI score0.02497EPSS

SaveExploits0References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by