Vulnerability Database

313,519

Total vulnerabilities in the database

CVE-2017-7694

Remote Code Execution vulnerability in symphony/content/content.blueprintsdatasources.php in Symphony CMS through 2.6.11 allows remote attackers to execute code and get a webshell from the back-end. The attacker must be authenticated and enter PHP code in the datasource editor or event editor.

  • Published: Apr 11, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-7694
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:P

CWEs:

Software From Fixed in
getsymphony / symphony - 2.6.11.x