CVE-2013-7346
Symphony CMS < 2.3.2 - Cross-Site Request Forgery via SQL Injection in Authors Sort Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2013-7346. PoCs published by High-Tech Bridge.
AI-analyzed exploit summary This exploit demonstrates a cross-site request forgery (CSRF) vulnerability in Symphony CMS, allowing an attacker to perform unauthorized actions via a crafted image tag. The example includes a SQL injection payload to write a file, indicating potential for further exploitation.
Description
Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the sort parameter to system/authors/, related to CVE-2013-2559.
Exploits (1)
This exploit demonstrates a cross-site request forgery (CSRF) vulnerability in Symphony CMS, allowing an attacker to perform unauthorized actions via a crafted image tag. The example includes a SQL injection payload to write a file, indicating potential for further exploitation.