Symphony Multiple SQL Injection and Cross Site Scripting Vulnerabilities
BID:50470
Info
Symphony Multiple SQL Injection and Cross Site Scripting Vulnerabilities
| Bugtraq ID: | 50470 |
| Class: | Input Validation Error |
| CVE: |
CVE-2011-4340 CVE-2011-4341 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 01 2011 12:00AM |
| Updated: | Jan 03 2012 10:20PM |
| Credit: | Mesut Timur |
| Vulnerable: |
Symphony Symphony 2.1.2 Symphony Symphony 2.1.1 Symphony Symphony 2.2.3 Symphony Symphony 2.2 |
| Not Vulnerable: |
Symphony Symphony 2.2.4 |
Discussion
Symphony Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Symphony versions prior to 2.2.4 are vulnerable.
Symphony is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data.
Exploiting these vulnerabilities could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Symphony versions prior to 2.2.4 are vulnerable.
Exploit / POC
Symphony Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issues, an attacker must entice an unsuspecting user to follow a malicious URI.
The following example URIs are available:
Attackers can use a browser to exploit these issues. To exploit the cross-site scripting issues, an attacker must entice an unsuspecting user to follow a malicious URI.
The following example URIs are available:
Solution / Fix
Symphony Multiple SQL Injection and Cross Site Scripting Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Symphony Multiple SQL Injection and Cross Site Scripting Vulnerabilities
References:
References:
- Symphony Homepage (Symphony)
- XSS and SQL Injection Vulnerabilities on Symphony CMS (Mavituna Security)
- XSS and SQL Injection Vulnerabilities on Symphony CMS 2.2.3 (Netsparker)