21degrees

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

21degrees records in CISA KEV

No 21degrees vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Symphony 2 records MEDIUM

Records

2 records in Symphony · all components

TI-2008-03439 CVE-2008-3592 · GHSA-cfxx-rjmh-m6qv

Unrestricted file upload vulnerability in the File Manager in the admin panel in…

MEDIUM 47

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable exte…

CVSS 2.0HIGH 8.5 Network Low privileges Interaction — EPSS 0.06807 Published 2008-08-11 No fix listed CWE-94

TI-2008-03438 CVE-2008-3591 · GHSA-chgr-hfpp-gr3r

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01…

LOW 37

SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the sym_auth cookie in a /publish/filemanager/ request to…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02082 Published 2008-08-11 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0