Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

s9y serendipity 1.1.2 vulnerabilities and exploits

(subscribe to this query)
435
VMScore
CVE-2008-1385
Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) prior to 1.3.1 allows remote malicious users to inject arbitrary web script or HTML via the Referer HTTP header.
S9y Serendipity 0.7S9y Serendipity 0.7.1S9y Serendipity 1.0S9y Serendipity 1.0.1S9y Serendipity 1.1.3S9y Serendipity 1.1.4S9y Serendipity 0.8S9y Serendipity 0.8.1S9y Serendipity 0.8.2S9y Serendipity 1.0.2S9y Serendipity 1.0.3S9y Serendipity 1.2S9y Serendipity 1.2.1S9y Serendipity 0.5 Pl1S9y Serendipity 0.6 Pl3S9y Serendipity 0.9S9y Serendipity 0.9.1S9y Serendipity 1.1.1S9y Serendipity 1.1.2S9y Serendipity 0.3S9y Serendipity 0.4S9y Serendipity 0.8.3
534
VMScore
CVE-2009-4412
Unrestricted file upload vulnerability in Serendipity prior to 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified direc...
S9y Serendipity 1.1.4S9y Serendipity 1.1.3S9y Serendipity 0.9S9y Serendipity 0.8.5S9y Serendipity 0.5S9y Serendipity 0.4S9y Serendipity 0.3S9y Serendipity 1.0.3S9y Serendipity 1.1.1S9y Serendipity 1.3S9y Serendipity 1.4.1S9y Serendipity 1.4S9y Serendipity 1.1.2S9y Serendipity 1.1S9y Serendipity 0.8S9y Serendipity 0.7.1S9y Serendipity 0.8.1S9y Serendipity 0.8.2S9y Serendipity 1.3.1S9y SerendipityS9y Serendipity 1.0.4S9y Serendipity 0.7
231
VMScore
CVE-2010-2957
Cross-site scripting (XSS) vulnerability in Serendipity prior to 1.5.4, when "Remember me" logins are enabled, allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
S9y Serendipity 0.7S9y Serendipity 1.0.4S9y Serendipity 1.1.4S9y Serendipity 1.1.1S9y Serendipity 1.4S9y Serendipity 1.2.1S9y Serendipity 1.2S9y Serendipity 1.0.2S9y Serendipity 1.0.1S9y Serendipity 1.0S9y Serendipity 0.9S9y Serendipity 0.8.5S9y Serendipity 0.8.2S9y Serendipity 1.1S9y Serendipity 1.5.1S9y Serendipity 0.5S9y Serendipity 0.4S9y Serendipity 0.3S9y Serendipity 0.8S9y Serendipity 0.6S9y Serendipity 0.8.4S9y Serendipity 0.9.1
435
VMScore
CVE-2013-5314
Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1.6.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the serendipity[htmltarget] parameter.
S9y Serendipity 0.8.4S9y Serendipity 0.8.3S9y Serendipity 0.9.1S9y Serendipity 1.0.3S9y Serendipity 1.0.2S9y Serendipity 1.5.3S9y Serendipity 1.0.1S9y Serendipity 1.3S9y Serendipity 1.1.4S9y Serendipity 1.1.1S9y Serendipity 1.1.3S9y Serendipity 0.7.1S9y Serendipity 0.4S9y Serendipity 0.3S9y Serendipity 1.1S9y Serendipity 1.3.1S9y Serendipity 1.6S9y Serendipity 0.8.5S9y Serendipity 1.2.1S9y Serendipity 0.7S9y Serendipity 0.8.1S9y Serendipity 0.8.2
668
VMScore
CVE-2012-2762
SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote malicious users to execute arbitrary SQL commands via the url parameter to comment.php.
S9y Serendipity 1.5.3S9y Serendipity 1.5.2S9y Serendipity 1.1.4S9y Serendipity 1.1.3S9y Serendipity 1.0.1S9y Serendipity 1.0S9y Serendipity 0.8.1S9y Serendipity 0.8S9y Serendipity 1.5.5S9y Serendipity 1.5.4S9y Serendipity 1.2.1S9y Serendipity 1.2S9y Serendipity 1.0.3S9y Serendipity 1.0.2S9y Serendipity 0.8.3S9y Serendipity 0.8.2S9y Serendipity 1.5.1S9y Serendipity 1.4.1S9y Serendipity 1.1.2S9y Serendipity 1.1.1S9y Serendipity 0.9.1S9y Serendipity 0.9
435
VMScore
CVE-2012-2331
Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity prior to 1.6.1 allows remote malicious users to inject arbitrary web script or HTML via the serendipity[textarea] parameter. NOTE: this issue might be resultant from cross-...
S9y SerendipityS9y Serendipity 0.9.1S9y Serendipity 1.2.1S9y Serendipity 0.7.1S9y Serendipity 0.8.1S9y Serendipity 1.3S9y Serendipity 1.0S9y Serendipity 1.1S9y Serendipity 1.4S9y Serendipity 0.7S9y Serendipity 1.0.4S9y Serendipity 1.1.4S9y Serendipity 1.1.1S9y Serendipity 1.5.1S9y Serendipity 1.4.1S9y Serendipity 0.4S9y Serendipity 0.3S9y Serendipity 0.9S9y Serendipity 0.8.5S9y Serendipity 0.8.4S9y Serendipity 0.8.3S9y Serendipity 0.8.2
755
VMScore
CVE-2012-2332
SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity prior to 1.6.1 allows remote malicious users to execute arbitrary SQL commands via the serendipity[plugin_to_conf] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF)...
S9y Serendipity 0.8.4S9y Serendipity 0.9.1S9y Serendipity 1.1.1S9y Serendipity 0.7.1S9y Serendipity 1.5.4S9y Serendipity 1.5.3S9y Serendipity 0.4S9y Serendipity 1.1S9y Serendipity 1.2.1S9y Serendipity 1.2S9y Serendipity 0.7S9y Serendipity 1.0.4S9y Serendipity 1.3S9y Serendipity 1.1.2S9y Serendipity 1.0S9y Serendipity 1.5.1S9y Serendipity 1.4.1S9y SerendipityS9y Serendipity 0.9S9y Serendipity 0.8S9y Serendipity 0.8.1S9y Serendipity 1.6.1
383
VMScore
CVE-2013-5670
Cross-site scripting (XSS) vulnerability in spell-check-savedicts.php in the htmlarea SpellChecker module, as used in Serendipity prior to 1.7.3 and possibly other products, allows remote malicious users to inject arbitrary web script or HTML via the to_r_list parameter.
S9y Serendipity 1.7S9y SerendipityS9y Serendipity 1.2.1S9y Serendipity 1.2S9y Serendipity 1.1.4S9y Serendipity 1.1.3S9y Serendipity 0.8.2S9y Serendipity 0.8.1S9y Serendipity 0.8S9y Serendipity 0.7.1S9y Serendipity 1.5.4S9y Serendipity 1.5.3S9y Serendipity 1.5.2S9y Serendipity 1.5.1S9y Serendipity 1.0.2S9y Serendipity 1.0.1S9y Serendipity 1.0S9y Serendipity 0.9.1S9y Serendipity 1.6.1S9y Serendipity 1.5.5S9y Serendipity 1.4.1S9y Serendipity 1.3.1
668
VMScore
CVE-2010-1916
The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and previous versions, as used in Serendipity 1.5.2 and previous versions, allows remote malicious users to bypass intended access restrictions and modify the configuration of arbitrary plugins via (1) crafted ...
Xinha Wysiwyg Editor 0.93Xinha Wysiwyg Editor 0.92Xinha Wysiwyg Editor 0.95Xinha Wysiwyg Editor 0.94Xinha Wysiwyg Editor 0.91Xinha Wysiwyg Editor 0.9Xinha Wysiwyg Editor 0.96S9y Serendipity 1.4.1S9y Serendipity 1.4S9y Serendipity 1.1.2S9y Serendipity 1.1.1S9y Serendipity 1.1S9y Serendipity 0.9S9y Serendipity 0.8.5S9y Serendipity 0.7S9y Serendipity 0.6S9y Serendipity 1.5S9y Serendipity 1.5.2S9y Serendipity 1.1.4S9y Serendipity 1.1.3S9y Serendipity 1.0S9y Serendipity 0.9.1
383
VMScore
CVE-2008-1476
Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) prior to 1.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks.
Serendipity Serendipity 0.7Serendipity Serendipity 0.7.1Serendipity Serendipity 0.9Serendipity Serendipity 0.9.1Serendipity Serendipity 1.0Serendipity Serendipity 1.1.2Serendipity Serendipity 1.1.3Serendipity Serendipity 0.8Serendipity Serendipity 0.8.1Serendipity Serendipity 1.0.1Serendipity Serendipity 1.0.2Serendipity Serendipity 1.1.4Serendipity Serendipity 1.2Serendipity Serendipity 0.5 Pl1Serendipity Serendipity 0.6 Pl3Serendipity Serendipity 0.3Serendipity Serendipity 0.4Serendipity Serendipity 0.8.2Serendipity Serendipity 0.8.3Serendipity Serendipity 1.0.3Serendipity Serendipity 1.0.4Serendipity Serendipity
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook