CVE-2013-7346
published 2014-03-27CVE-2013-7346: Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for…
PriorityP431medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EXPLOIT
EPSS
0.55%
42.0th percentile
Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the sort parameter to system/authors/, related to CVE-2013-2559.
Affected
10 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| getsymphony | symphony | <= 2.3.1 | — |
| getsymphony | symphony | — | — |
| getsymphony | symphony | — | — |
| getsymphony | symphony | — | — |
| getsymphony | symphony | — | — |
| getsymphony | symphony | — | — |
| getsymphony | symphony | — | — |
| getsymphony | symphony | — | — |
| getsymphony | symphony | — | — |
| getsymphony | symphony | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Symphony CMS up to 2.3.1 sort cross-site request forgery (EDB-39136)
vuldb·2026-05-09·CVSS 6.8
CVE-2013-7346 [MEDIUM] Symphony CMS up to 2.3.1 sort cross-site request forgery (EDB-39136)
A vulnerability categorized as problematic has been discovered in Symphony CMS up to 2.3.1. Affected is an unknown function. Executing a manipulation of the argument sort can lead to cross-site request forgery.
This vulnerability is tracked as CVE-2013-7346. The attack can be launched remotely. Moreover, an exploit is present.
It is advisable to upgrade the affected component.
GHSA
GHSA-975c-4jj8-2jx7: Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2
ghsa_unreviewed·2022-05-13·CVSS 6.5
CVE-2013-7346 [MEDIUM] CWE-352 GHSA-975c-4jj8-2jx7: Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2
Cross-site request forgery (CSRF) vulnerability in Symphony CMS before 2.3.2 allows remote attackers to hijack the authentication of administrators for requests that conduct SQL injection attacks via the sort parameter to system/authors/, related to CVE-2013-2559.
No detection rules found.
No writeups or analysis indexed.
2014-03-27
Published