CVE-2010-3458
Symphony CMS <2.1.1 - SQL Injection
Title source: llmDescription
SQL injection vulnerability in lib/toolkit/events/event.section.php in Symphony CMS 2.0.7 and 2.1.1 allows remote attackers to execute arbitrary SQL commands via the send-email[recipient] parameter to about/. NOTE: some of these details are obtained from third party information.
Exploits (1)
References (5)
Scores
EPSS
0.0050
EPSS Percentile
65.8%
Classification
CWE
CWE-89
Status
draft
Affected Products (2)
getsymphony/symphony
getsymphony/symphony
Timeline
Published
Sep 17, 2010
Tracked Since
Feb 18, 2026