Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sensiolabs symfony 2.0.13 vulnerabilities and exploits

(subscribe to this query)
6.4
CVSSv2
CVE-2012-6431
Symfony 2.0.x prior to 2.0.20 does not process URL encoded data consistently within the Routing and Security components, which allows remote malicious users to bypass intended URI restrictions via a doubly encoded string.
Sensiolabs Symfony 2.0.18Sensiolabs Symfony 2.0.16Sensiolabs Symfony 2.0.9Sensiolabs Symfony 2.0.7Sensiolabs Symfony 2.0.2Sensiolabs Symfony 2.0.15Sensiolabs Symfony 2.0.14Sensiolabs Symfony 2.0.13Sensiolabs Symfony 2.0.12Sensiolabs Symfony 2.0.11Sensiolabs Symfony 2.0.0Sensiolabs Symfony 2.0.6Sensiolabs Symfony 2.0.5Sensiolabs Symfony 2.0.4Sensiolabs Symfony 2.0.3Sensiolabs Symfony 2.0.19Sensiolabs Symfony 2.0.17Sensiolabs Symfony 2.0.10Sensiolabs Symfony 2.0.8Sensiolabs Symfony 2.0.1
7.5
CVSSv2
CVE-2013-1348
The Yaml::parse function in Symfony 2.0.x prior to 2.0.22 remote malicious users to execute arbitrary PHP code via a PHP file, a different vulnerability than CVE-2013-1397.
Sensiolabs Symfony 2.0.12Sensiolabs Symfony 2.0.13Sensiolabs Symfony 2.0.2Sensiolabs Symfony 2.0.20Sensiolabs Symfony 2.0.9Sensiolabs Symfony 2.0.21Sensiolabs Symfony 2.0.0Sensiolabs Symfony 2.0.16Sensiolabs Symfony 2.0.17Sensiolabs Symfony 2.0.5Sensiolabs Symfony 2.0.6Sensiolabs Symfony 2.0.1Sensiolabs Symfony 2.0.10Sensiolabs Symfony 2.0.11Sensiolabs Symfony 2.0.18Sensiolabs Symfony 2.0.19Sensiolabs Symfony 2.0.7Sensiolabs Symfony 2.0.8Sensiolabs Symfony 2.0.14Sensiolabs Symfony 2.0.15Sensiolabs Symfony 2.0.3Sensiolabs Symfony 2.0.4
6.8
CVSSv2
CVE-2012-6432
Symfony 2.0.x prior to 2.0.20, 2.1.x prior to 2.1.5, and 2.2-dev, when the internal routes configuration is enabled, allows remote malicious users to access arbitrary services via vectors involving a URI beginning with a /_internal substring.
Sensiolabs Symfony 2.0.8Sensiolabs Symfony 2.0.7Sensiolabs Symfony 2.0.19Sensiolabs Symfony 2.0.20Sensiolabs Symfony 2.0.2Sensiolabs Symfony 2.0.1Sensiolabs Symfony 2.0.12Sensiolabs Symfony 2.0.9Sensiolabs Symfony 2.0.10Sensiolabs Symfony 2.0.15Sensiolabs Symfony 2.0.4Sensiolabs Symfony 2.0.6Sensiolabs Symfony 2.0.18Sensiolabs Symfony 2.0.11Sensiolabs Symfony 2.0.16Sensiolabs Symfony 2.0.14Sensiolabs Symfony 2.0.3Sensiolabs Symfony 2.0.5Sensiolabs Symfony 2.0.17Sensiolabs Symfony 2.0.0Sensiolabs Symfony 2.0.13Sensiolabs Symfony 2.1.0
7.5
CVSSv2
CVE-2013-1397
Symfony 2.0.x prior to 2.0.22, 2.1.x prior to 2.1.7, and 2.2.x remote malicious users to execute arbitrary PHP code via a serialized PHP object to the (1) Yaml::parse or (2) Yaml\Parser::parse function, a different vulnerability than CVE-2013-1348.
Sensiolabs Symfony 2.2.11Sensiolabs Symfony 2.2.10Sensiolabs Symfony 2.2.2Sensiolabs Symfony 2.2.1Sensiolabs Symfony 2.0.12Sensiolabs Symfony 2.0.13Sensiolabs Symfony 2.0.20Sensiolabs Symfony 2.0.3Sensiolabs Symfony 2.1.4Sensiolabs Symfony 2.1.3Sensiolabs Symfony 2.2.6Sensiolabs Symfony 2.2.5Sensiolabs Symfony 2.0.0Sensiolabs Symfony 2.0.1Sensiolabs Symfony 2.0.16Sensiolabs Symfony 2.0.17Sensiolabs Symfony 2.0.18Sensiolabs Symfony 2.0.6Sensiolabs Symfony 2.0.7Sensiolabs Symfony 2.1.2Sensiolabs Symfony 2.1.1Sensiolabs Symfony 2.1.0
5
CVSSv2
CVE-2013-5958
The Security component in Symfony 2.0.x prior to 2.0.25, 2.1.x prior to 2.1.13, 2.2.x prior to 2.2.9, and 2.3.x prior to 2.3.6 allows remote malicious users to cause a denial of service (CPU consumption) via a long password that triggers an expensive hash computation, as demonstr...
Sensiolabs Symfony 2.3.0Sensiolabs Symfony 2.3.5Sensiolabs Symfony 2.2.3Sensiolabs Symfony 2.2Sensiolabs Symfony 2.1.11Sensiolabs Symfony 2.1.6Sensiolabs Symfony 2.1.4Sensiolabs Symfony 2.1.2Sensiolabs Symfony 2.0.10Sensiolabs Symfony 2.0.12Sensiolabs Symfony 2.0.19Sensiolabs Symfony 2.0.20Sensiolabs Symfony 2.0.5Sensiolabs Symfony 2.0.7Sensiolabs Symfony 2.2.5Sensiolabs Symfony 2.2.6Sensiolabs Symfony 2.2.8Sensiolabs Symfony 2.2.1Sensiolabs Symfony 2.1.1Sensiolabs Symfony 2.1.0Sensiolabs Symfony 2.0.0Sensiolabs Symfony 2.0.1
6.8
CVSSv2
CVE-2015-2308
Eval injection vulnerability in the HttpCache class in HttpKernel in Symfony 2.x prior to 2.3.27, 2.4.x and 2.5.x prior to 2.5.11, and 2.6.x prior to 2.6.6 allows remote malicious users to execute arbitrary PHP code via a language="php" attribute of a SCRIPT element.
Sensiolabs Symfony 2.0.14Sensiolabs Symfony 2.0.15Sensiolabs Symfony 2.0.21Sensiolabs Symfony 2.0.22Sensiolabs Symfony 2.1.0Sensiolabs Symfony 2.1.1Sensiolabs Symfony 2.2.0Sensiolabs Symfony 2.2.1Sensiolabs Symfony 2.2.6Sensiolabs Symfony 2.2.8Sensiolabs Symfony 2.3.25Sensiolabs Symfony 2.3.26Sensiolabs Symfony 2.4.7Sensiolabs Symfony 2.4.8Sensiolabs Symfony 2.5.4Sensiolabs Symfony 2.5.5Sensiolabs Symfony 2.6.4Sensiolabs Symfony 2.6.5Sensiolabs Symfony 2.0.10Sensiolabs Symfony 2.0.11Sensiolabs Symfony 2.0.18Sensiolabs Symfony 2.0.19
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook