Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Symphony-cms Component: Symphony Cms Clear all filters
TI-2011-03806 CVE-2011-4341 · GHSA-g4wh-mvqv-5fvh

Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in…

Priority LOW 25

Multiple SQL injection vulnerabilities in symphony/content/content.publish.php in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author permissions to execute arbitrary…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02779 Published 2012-02-12 No fix listed CWE-79
TI-2011-03805 CVE-2011-4340 · GHSA-wvq5-72qp-grjw

Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly…

Priority LOW 20

Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) th…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01798 Published 2012-02-12 Fixed in 2.2.4 CWE-79