Read the docs

Symphony-cms

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Symphony-cms records in CISA KEV

No Symphony-cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Symphony Cms 4 records MEDIUM

Records

4 records

TI-2011-03806 CVE-2011-4341 · GHSA-g4wh-mvqv-5fvh

Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in…

Priority LOW 25

Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author permissions to execute arbitrary…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02779 Published 2012-02-12 No fix listed CWE-79
TI-2011-03805 CVE-2011-4340 · GHSA-wvq5-72qp-grjw

Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly…

Priority LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) th…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01798 Published 2012-02-12 Fixed in 2.2.4 CWE-79
Open these records in search →