Directory traversal vulnerability in template/usererror.missing_extension.php in Symphony CMS prior to 2.6.10 allows remote malicious users to rename arbitrary files via a .. (dot dot) in the existing-folder and new-folder parameters.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
getsymphony symphony |