Exploitation Summary
EIP tracks 1 public exploit for CVE-2010-3458. PoCs published by JosS.
AI-analyzed exploit summary This exploit demonstrates multiple vulnerabilities in Symphony CMS 2.0.7, including SQL injection, XSS, and cookie manipulation via POST parameters. The PoC provides specific payloads for each vulnerability type.
Description
SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute arbitrary SQL commands via the send-email[recipient] parameter to about/. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates multiple vulnerabilities in Symphony CMS 2.0.7, including SQL injection, XSS, and cookie manipulation via POST parameters. The PoC provides specific payloads for each vulnerability type.