CVE-2011-4340
Symphony CMS vulnerable to Cross-site Scripting
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Symphony 2.2.3 - '/symphony/publish/images?filter' Cross-Site Scripting2011-11-01 · webapps · php · Verified
Impact
Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profiledevkit/content/content.profile.php, as demonstrated via requests to (a) the default URI, (b) about/, or (c) drafts/; or (2) the filter parameter in symphony/lib/core/class.symphony.php, as demonstrated via requests to (d) symphony/publish/comments or (e) symphony/publish/images. NOTE: some of these details are obtained from third party information.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | symphonycms/symphony-2 | < 2.2.4 | 2.2.4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Symphony-Cms | Symphony Cms | Version 2.2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- http://packetstormsecurity.org/files/view/106493/symphonycms-sqlxss.txt
- http://seclists.org/bugtraq/2011/Nov/8
- http://secunia.com/advisories/46663
- http://symphony-cms.com/download/releases/version/2.2.4/
- http://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-symphony-cms/
- http://www.openwall.com/lists/oss-security/2011/11/22/9
- http://www.osvdb.org/76882
- http://www.osvdb.org/76883
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71106
- https://github.com/advisories/GHSA-wvq5-72qp-grjw
- https://nvd.nist.gov/vuln/detail/CVE-2011-4340
- http://symphony-cms.com/download/releases/version/2.2.4
- https://web.archive.org/web/20120614074927/http://www.mavitunasecurity.com/xss-and-sql-injection-vulnerabilities-in-symphony-cms