Approved changes feed: RSS · Atom
cpe:2.3:a:getsymphony:symphony:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Getsymphony (662a4337-afcd-5d5c-beee-1e31578ad7e7) |
|---|---|
| Product | Symphony (02301729-269b-5be2-a6da-7194477d392c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/symphonycms/symphonycms |
purl2cpe | 2026-06-01 10:11:24.163707 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-7694 |
vulnerable | 2026-06-08 05:10:05.907865 |
Details available
Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor.
Published: 2017-04-11T23:00:00.000Z
Updated: 2024-08-05T16:12:28.185Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5542 |
vulnerable | 2026-06-08 05:09:47.175883 |
Details available
Cross-site scripting (XSS) vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to inject arbitrary web script or HTML via the existing-folder parameter.
Published: 2017-01-20T08:39:00.000Z
Updated: 2024-08-05T15:04:15.279Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-5541 |
vulnerable | 2026-06-08 05:09:47.175460 |
Details available
Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS before 2.6.10 allows remote attackers to rename arbitrary files via a .. (dot dot) in the existing-folder and new-folder parameters.
Published: 2017-01-20T08:39:00.000Z
Updated: 2024-08-05T15:04:15.355Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-8766 |
vulnerable | 2026-06-08 05:07:04.869830 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in content/content.systempreferences.php in Symphony CMS before 2.6.4 allow remote attackers to inject arbitrary web script or HTML via the (1) email_sendmail[from_name], (2) email_sendmail[from_address], (3) email_smtp[from_name], (4) email_smtp[from_address], (5) email_smtp[host], (6) email_smtp[port], (7) jit_image_manipulation[trusted_external_sites], or (8) maintenance_mode[ip_whitelist] parameters to system/preferences.
Published: 2016-01-08T21:00:00.000Z
Updated: 2024-08-06T08:29:22.057Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-4661 |
vulnerable | 2026-06-08 05:06:40.405092 |
Details available
Cross-site scripting (XSS) vulnerability in Symphony CMS 2.6.2 allows remote attackers to inject arbitrary web script or HTML via the sort parameter to system/authors.
Published: 2015-06-18T18:00:00.000Z
Updated: 2024-08-06T06:18:12.218Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-7346 |
vulnerable | 2026-06-08 05:05:10.037615 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-2559 |
vulnerable | 2026-06-08 05:04:26.800189 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.