Getsymphony vulnerabilities

Products

• Symphony 18

Newest

• getsymphony symphony A XML External Entity (XXE) vulnerability was discovered in symphony\lib\toolkit\class.xmlelement... CVE-2020-25912 9.1 CriticalOctober 31, 2021
• getsymphony symphony Cross-site scripting (XSS) vulnerabilities in Symphony CMS 3.0.0 allow remote attackers to inject... CVE-2020-25343 5.4 MediumOctober 7, 2020
• getsymphony symphony content/content.blueprintsevents.php in Symphony CMS 3.0.0 allows XSS via fields['name'] to... CVE-2020-15071 6.1 MediumAugust 11, 2020
• getsymphony symphony content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page. CVE-2018-12043 6.1 MediumJune 7, 2018
• getsymphony symphony Symphony 2 2.6.11 has XSS in the meta[navigation_group] parameter to content/content... CVE-2017-8876 6.1 MediumMay 10, 2017
• getsymphony symphony Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in... CVE-2017-7694 8.8 HighApril 11, 2017
• getsymphony symphony Symphony 2.6.9 has XSS in publish/notes/edit/##/saved/ via the bottom form field. CVE-2017-6067 6.1 MediumMarch 27, 2017
• getsymphony symphony Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony... CVE-2017-5542 6.1 MediumJanuary 20, 2017
• getsymphony symphony Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS... CVE-2017-5541 5.3 MediumJanuary 20, 2017
• getsymphony symphony Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled,... CVE-2016-4309 Public exploit EPSS 10.2% 7.5 HighJune 30, 2016
• getsymphony symphony Symphony CMS XSS Vulnerabilities CVE-2015-8766 Fix available 6.1 MediumJanuary 8, 2016
• getsymphony symphony Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.6.3 allow remote attackers... CVE-2015-8376 6.1 MediumJanuary 8, 2016
• getsymphony symphony Cross-site scripting (XSS) vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject... CVE-2015-4661 4.3 MediumJune 18, 2015
• getsymphony symphony Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote... CVE-2013-7346 Public exploit 6.8 MediumMarch 27, 2014
• getsymphony symphony SQL injection vulnerability in Symphony CMS before 2.3.2 allows remote authenticated users to... CVE-2013-2559 Public exploit 6.5 MediumMarch 27, 2014
• getsymphony symphony SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1... CVE-2010-3458 Public exploit 7.5 HighSeptember 17, 2010
• getsymphony symphony Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.0.7 and 2.1.1 allow remote... CVE-2010-3457 Public exploit 4.3 MediumSeptember 17, 2010
• getsymphony symphony Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to... CVE-2010-2143 Public exploit 7.5 HighJune 3, 2010