Test ID:	1.3.6.1.4.1.25623.1.0.108142
Category:	Web application abuses
Title:	Symphony CMS <= 2.6.11 RCE Vulnerability
Summary:	Symphony CMS is prone to a remote code execution (RCE); vulnerability.
Description:	Summary: Symphony CMS is prone to a remote code execution (RCE) vulnerability. Vulnerability Impact: Successfully exploitation will allow remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor. Affected Software/OS: Symphony CMS versions through 2.6.11. Solution: Upgrade to version 2.7.0 or later. CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-7694 BugTraq ID: 97594 http://www.securityfocus.com/bid/97594 http://www.math1as.com/symphonycms_2.7_exec.txt https://github.com/symphonycms/symphony-2/commit/e30a18f8f09dca836e141bf126a26e565c9a2bc7 https://github.com/symphonycms/symphony-2/issues/2655 Common Vulnerability Exposure (CVE) ID: CVE-2017-8876 https://github.com/DeuxHuitHuit/symphony-2/commit/cd69a2a516e6503c1a1c7e097ee90d255ec3d6b7
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.