CVE-2008-3592

no score yetEPSS 6.8%

21degrees symphony: no CVSS score yet. EPSS 6.8% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in the File Manager in the admin panel in Twentyone Degrees Symphony 1.7.01 and earlier allows remote attackers to execute arbitrary code by uploading a file with an executable extension to a directory specified in the destination parameter, then accessing the uploaded file via a direct request, as demonstrated using workspace/masters/.

EPSS: 6.8% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2008-08-11
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

21degrees:symphony

References

http://overture21.com/forum/comments.php?DiscussionID=1823
http://secunia.com/advisories/31293
http://securityreason.com/securityalert/4137
https://exchange.xforce.ibmcloud.com/vulnerabilities/44432
https://www.exploit-db.com/exploits/6177

Check your stack JSON