Summary
Symphony is prone to following multiple remote security vulnerabilities:
1. An authentication-bypass vulnerability
2. Multiple cross-site-scripting vulnerabilities
3. An HTML-injection vulnerability
4. Multiple SQL-injection vulnerabilities
An attacker may leverage these issues to run malicious HTML and script codes in the context of the affected browser, steal cookie-based authentication credentials, to gain unauthorized access to the affected application, access or modify data, or exploit latent vulnerabilities in the underlying database.
Symphony 2.3 is vulnerable
other versions may also be affected.
Solution
Reportedly, the issue is fixed. However, Symantec has not confirmed this. Please contact the vendor for more information.
References
Updated on 2015-03-25
