Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

s9y serendipity 0.7 beta3 vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2008-0124

Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) prior to 1.3-beta1 allows remote authenticated users to inject arbitrary web script or HTML via (1) the "Real name" field in Personal Settings, which is presented to readers of articles; or (2) a file upload,...
S9y Serendipity 0.5S9y Serendipity 0.8 Beta5S9y Serendipity 1.0.3S9y Serendipity 1.1.4S9y Serendipity 0.4S9y Serendipity 0.7S9y Serendipity 1.0.4S9y Serendipity 0.7 Beta1S9y Serendipity 1.0 Beta3S9y Serendipity 0.8.2S9y Serendipity 0.6 Rc1S9y Serendipity 1.1.1S9y Serendipity 0.8 Beta 6 SnapshotS9y Serendipity 0.7.1S9y Serendipity 0.5 Pl1S9y Serendipity 0.6 Pl2S9y Serendipity 1.0 Beta2S9y Serendipity 0.7 Beta3S9y Serendipity 0.8 Beta6S9y Serendipity 0.7 Beta4S9y Serendipity 0.6 Pl1S9y Serendipity 0.8.1
NA

CVE-2007-6205

Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity prior to 1.2.1 allows remote malicious users to inject arbitrary web script or HTML via a link in an RSS feed.
S9y Serendipity 0.5S9y Serendipity 0.8 Beta5S9y Serendipity 1.0.3S9y Serendipity 1.1.4S9y Serendipity 0.4S9y Serendipity 0.8.5S9y Serendipity 0.7S9y Serendipity 1.0.4S9y Serendipity 0.7 Beta1S9y Serendipity 1.0 Beta3S9y Serendipity 0.8.3S9y Serendipity 0.8.4S9y Serendipity 0.8.2S9y Serendipity 0.6 Rc1S9y Serendipity 1.1.1S9y Serendipity 0.8 Beta 6S9y Serendipity 0.7.1S9y Serendipity 0.5 Pl1S9y Serendipity 1.0 Beta1S9y Serendipity 0.6 Pl2S9y Serendipity 1.0 Beta2S9y Serendipity 0.7 Beta3
NA

CVE-2006-6242

Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and previous versions allow remote malicious users to read or include arbitrary local files via a .. (dot dot) sequence in the serendipity[charset] parameter in (1) include/lang.inc.php; or to plugins/ scripts (2) ...
S9y Serendipity 0.5S9y Serendipity 0.8 Beta5S9y Serendipity 1.0.3S9y Serendipity 0.4S9y Serendipity 0.7S9y Serendipity 0.7 Beta1S9y Serendipity 1.0 Beta3S9y Serendipity 0.8.2S9y Serendipity 0.6 Rc1S9y Serendipity 0.7.1S9y Serendipity 0.5 Pl1S9y Serendipity 0.6 Pl2S9y Serendipity 1.0 Beta2S9y Serendipity 0.7 Beta3S9y Serendipity 0.8 Beta6S9y Serendipity 0.7 Beta4S9y Serendipity 0.6 Pl1S9y Serendipity 0.8.1S9y Serendipity 0.8S9y Serendipity 0.3S9y Serendipity 0.6 Pl3S9y Serendipity 0.9.1
NA

CVE-2006-2495

Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity prior to 1.0-beta3 allows remote malicious users to perform unauthorized actions as a logged-in user via a link or IMG tag.
S9y Serendipity 0.5S9y Serendipity 0.4S9y Serendipity 0.8.5S9y Serendipity 0.7S9y Serendipity 0.8.3S9y Serendipity 0.8.4S9y Serendipity 0.8.2S9y Serendipity 0.7.1S9y Serendipity 0.5 Pl1S9y Serendipity 1.0 Beta1S9y Serendipity 1.0 Beta2S9y Serendipity 0.8.1S9y Serendipity 0.8S9y Serendipity 0.3S9y Serendipity 0.6 Pl3S9y Serendipity 0.9.1S9y Serendipity 0.9S9y Serendipity 0.6
NA

CVE-2005-1448

Cross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity prior to 0.8 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors.
S9y Serendipity 0.8 Beta5S9y Serendipity 0.7S9y Serendipity 0.7 Beta1S9y Serendipity 0.7.1S9y Serendipity 0.7 Beta3S9y Serendipity 0.8 Beta6S9y Serendipity 0.7 Beta4S9y Serendipity 0.7 Beta2S9y Serendipity 0.7 Rc1
NA

CVE-2005-1449

Unknown vulnerability in serendipity_config_local.inc.php for Serendipity prior to 0.8 has unknown impact.
S9y Serendipity 0.8 Beta5S9y Serendipity 0.4S9y Serendipity 0.7S9y Serendipity 0.7 Beta1S9y Serendipity 0.7.1S9y Serendipity 0.5 Pl1S9y Serendipity 0.7 Beta3S9y Serendipity 0.8 Beta6S9y Serendipity 0.7 Beta4S9y Serendipity 0.3S9y Serendipity 0.6 Pl3S9y Serendipity 0.7 Beta2S9y Serendipity 0.7 Rc1
NA

CVE-2005-1451

The media manager in Serendipity prior to 0.8 allows remote malicious users to upload and execute arbitrary (1) .php or (2) .shtml files.
S9y Serendipity 0.4S9y Serendipity 0.7S9y Serendipity 0.7 Beta1S9y Serendipity 0.8 Beta 6S9y Serendipity 0.7.1S9y Serendipity 0.5 Pl1S9y Serendipity 0.7 Beta3S9y Serendipity 0.7 Beta4S9y Serendipity 0.8 Beta 5S9y Serendipity 0.3S9y Serendipity 0.6 Pl3S9y Serendipity 0.7 Beta2S9y Serendipity 0.7 Rc1
NA

CVE-2005-1134

SQL injection vulnerability in exit.php for Serendipity 0.8 and previous versions allows remote malicious users to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters.
S9y Serendipity 0.5S9y Serendipity 0.8 Beta5S9y Serendipity 0.4S9y Serendipity 0.7S9y Serendipity 0.7 Beta1S9y Serendipity 0.6 Rc1S9y Serendipity 0.5 Pl1S9y Serendipity 0.6 Pl2S9y Serendipity 0.7 Beta3S9y Serendipity 0.8 Beta6S9y Serendipity 0.7 Beta4S9y Serendipity 0.6 Pl1S9y Serendipity 0.3S9y Serendipity 0.6 Pl3S9y Serendipity 0.6 Rc2S9y Serendipity 0.7 Beta2S9y Serendipity 0.7 Rc1S9y Serendipity 0.6
NA

CVE-2004-2157

Cross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions prior to 0.7-beta3, allows remote malicious users to inject arbitrary HTML and PHP code via the (1) email or (2) username field.
S9y Serendipity 0.7 Beta1
NA

CVE-2004-2525

Cross-site scripting (XSS) vulnerability in compat.php in Serendipity prior to 0.7.1 allows remote malicious users to inject arbitrary web script or HTML via the searchTerm variable.
S9y Serendipity 0.5S9y Serendipity 0.4S9y Serendipity 0.7S9y Serendipity 0.7 Beta1S9y Serendipity 0.6 Rc1S9y Serendipity 0.5 Pl1S9y Serendipity 0.6 Pl2S9y Serendipity 0.7 Beta3S9y Serendipity 0.7 Beta4S9y Serendipity 0.6 Pl1S9y Serendipity 0.3S9y Serendipity 0.6 Pl3S9y Serendipity 0.6 Rc2S9y Serendipity 0.7 Beta2S9y Serendipity 0.7 Rc1S9y Serendipity 0.6
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
TCPCVE-2024-4577CVE-2024-2695CVE-2024-31870injectionCVE-2024-3813arbitrary codeCVE-2024-27801CVE-2024-30120
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook