Skip to content
OpenAdvisories

Archive

12 February 2012

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Low —
    CVE-2011-4340 Public exploit

    Symphony CMS vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profi…