Skip to content
OpenAdvisories

Archive

February 2012

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • Low —
    CVE-2011-4340 Public exploit

    Symphony CMS vulnerable to Cross-site Scripting

    Multiple cross-site scripting (XSS) vulnerabilities in Symphony CMS 2.2.3 and possibly other versions before 2.2.4 allow remote authenticated users with Author privileges to inject arbitrary web script or HTML via (1) the profile parameter to extensions/profi…