VendorsSensioLabssymfony1.4.14
Vulnerabilities

SensioLabs Symfony 1.4.14

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2012-5574
lib/form/sfForm.class.php in Symfony CMS before 1.4.20 allows remote attackers to read arbitrary files via a crafted upload request.
Published 2012-12-18 · Modified
5.0EPSS 0.035
CVE-2012-2667
Session fixation vulnerability in lib/user/sfBasicSecurityUser.class.php in SensioLabs Symfony before 1.4.18 allows remote attackers to hijack web sessions via vectors related to the regenerate method and unspecified "database backed session classes."
Published 2012-06-07 · Modified
4.3EPSS 0.013