CVE-2017-7694

Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute…

published April 11, 2017

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04433 · 91.3th percentile
Published
2017-04-11T23:00Z
EPSS history
Timeline
  • 11 APR 23:00Z
    Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute…
    cvelistv5