Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown
CVE-2012-5574
Disclosure Date: December 18, 2012 (last updated October 05, 2023)
lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request.
0
Attacker Value
Unknown
CVE-2012-2667
Disclosure Date: June 07, 2012 (last updated October 04, 2023)
Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified "database backed session classes."
0
