Vendor
Twentyone Degrees
Products
1
CVEs
3
Across products
3
Status
Private
Products
1- 3 CVEs
Recent CVEs
3| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-23049 | Cri | 0.64 | 9.8 | 0.01 | Feb 5, 2024 | An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component. | ||
| CVE-2008-3592 | 0.04 | — | 0.07 | Aug 11, 2008 | Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination… | |||
| CVE-2008-3591 | 0.03 | — | 0.02 | Aug 11, 2008 | SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the sym_auth cookie in a /publish/filemanager/ request to index.php. |
- risk 0.64cvss 9.8epss 0.01
An issue in symphony v.3.6.3 and before allows a remote attacker to execute arbitrary code via the log4j component.
- CVE-2008-3592Aug 11, 2008risk 0.04cvss —epss 0.07
Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination…
- CVE-2008-3591Aug 11, 2008risk 0.03cvss —epss 0.02
SQL injection vulnerability in lib/class.admin.php in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary SQL commands via the sym_auth cookie in a /publish/filemanager/ request to index.php.