Home > Vulnerability Database > CVE-2013-7346

WhiteSource Vulnerability Database

CVE-2013-7346

Good to know:

Date: March 27, 2014

Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the sort parameter to system/authors/, related to CVE-2013-2559.

Language: PHP

Severity Score

6.8

Related Resources (4)

Url: http://archives.neohapsis.com/archives/bugtraq/2013-04/0018.html

Url: https://www.htbridge.com/advisory/HTB23148

Url: https://nvd.nist.gov/vuln/detail/CVE-2013-7346

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2013-7346

Severity Score

6.8

Weakness Type (CWE)

Cross-Site Request Forgery (CSRF)

CWE-352

Top Fix

Upgrade Version

Upgrade to version 2.3.2

Learn More

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

WhiteSource Vulnerability Database

We found results for “”

CVE-2013-7346

Good to know:

Date: March 27, 2014

Language: PHP

Severity Score

Related Resources (4)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?