[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249622

 
 

909

 
 

195521

 
 

282

 
Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2013-1348Date: (C)2014-06-02   (M)2023-12-22


The Yaml::parse function in Symfony 2.0.x before 2.0.22 remote attackers to execute arbitrary PHP code via a PHP file, a different vulnerability than CVE-2013-1397.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.5
Exploit Score: 10.0
Impact Score: 6.4
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: PARTIAL
Availability: PARTIAL
  
Reference:
SECUNIA-51980
BID-57574
http://symfony.com/blog/security-release-symfony-2-0-22-and-2-1-7-released
symfony-php-files-code-execution(81550)

CPE    22
cpe:/a:sensiolabs:symfony:2.0.16
cpe:/a:sensiolabs:symfony:2.0.15
cpe:/a:sensiolabs:symfony:2.0.14
cpe:/a:sensiolabs:symfony:2.0.0
...
CWE    1
CWE-94
OVAL    1
oval:org.secpod.oval:def:104531

© SecPod Technologies