CVE-2010-2143

Name of the Vulnerable Software and Affected Versions Symphony CMS version 2.0.7

Description The issue allows remote attackers to read arbitrary files and possibly have other unspecified impacts via a .. (dot dot) in the mode parameter of the index.php file.

Recommendations For Symphony CMS version 2.0.7, consider restricting access to the index.php file until a patch is available. As a temporary workaround, avoid using the mode parameter in the index.php file to minimize the risk of exploitation.