CVE-2010-2143

Symphony - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in index.php in Symphony CMS 2.0.7 allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the mode parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by AntiSecurity · textwebappsphp
https://www.exploit-db.com/exploits/12809

Scores

EPSS 0.0418
EPSS Percentile 88.5%

Classification

CWE
CWE-22
Status draft

Affected Products (1)

getsymphony/symphony

Timeline

Published Jun 03, 2010
Tracked Since Feb 18, 2026