Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

serendipity serendipity 0.8.3 vulnerabilities and exploits

(subscribe to this query)
383
VMScore
CVE-2008-1476
Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) prior to 1.3 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks.
Serendipity Serendipity 0.7Serendipity Serendipity 0.7.1Serendipity Serendipity 0.9Serendipity Serendipity 0.9.1Serendipity Serendipity 1.0Serendipity Serendipity 1.1.2Serendipity Serendipity 1.1.3Serendipity Serendipity 0.8Serendipity Serendipity 0.8.1Serendipity Serendipity 1.0.1Serendipity Serendipity 1.0.2Serendipity Serendipity 1.1.4Serendipity Serendipity 1.2Serendipity Serendipity 0.5 Pl1Serendipity Serendipity 0.6 Pl3Serendipity Serendipity 0.3Serendipity Serendipity 0.4Serendipity Serendipity 0.8.2Serendipity Serendipity 0.8.3Serendipity Serendipity 1.0.3Serendipity Serendipity 1.0.4Serendipity Serendipity
668
VMScore
CVE-2006-2495
Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity prior to 1.0-beta3 allows remote malicious users to perform unauthorized actions as a logged-in user via a link or IMG tag.
S9y Serendipity 0.7S9y Serendipity 0.7.1S9y Serendipity 0.9.1S9y Serendipity 1.0 Beta1S9y Serendipity 0.3S9y Serendipity 0.4S9y Serendipity 0.8S9y Serendipity 0.8.1S9y Serendipity 1.0 Beta2S9y Serendipity 0.6S9y Serendipity 0.6 Pl3S9y Serendipity 0.8.4S9y Serendipity 0.8.5S9y Serendipity 0.9S9y Serendipity 0.5S9y Serendipity 0.5 Pl1S9y Serendipity 0.8.2S9y Serendipity 0.8.3
435
VMScore
CVE-2008-1385
Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) prior to 1.3.1 allows remote malicious users to inject arbitrary web script or HTML via the Referer HTTP header.
S9y Serendipity 0.7S9y Serendipity 0.7.1S9y Serendipity 1.0S9y Serendipity 1.0.1S9y Serendipity 1.1.3S9y Serendipity 1.1.4S9y Serendipity 0.8S9y Serendipity 0.8.1S9y Serendipity 0.8.2S9y Serendipity 1.0.2S9y Serendipity 1.0.3S9y Serendipity 1.2S9y Serendipity 1.2.1S9y Serendipity 0.5 Pl1S9y Serendipity 0.6 Pl3S9y Serendipity 0.9S9y Serendipity 0.9.1S9y Serendipity 1.1.1S9y Serendipity 1.1.2S9y Serendipity 0.3S9y Serendipity 0.4S9y Serendipity 0.8.3
534
VMScore
CVE-2009-4412
Unrestricted file upload vulnerability in Serendipity prior to 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified direc...
S9y Serendipity 1.1.4S9y Serendipity 1.1.3S9y Serendipity 0.9S9y Serendipity 0.8.5S9y Serendipity 0.5S9y Serendipity 0.4S9y Serendipity 0.3S9y Serendipity 1.0.3S9y Serendipity 1.1.1S9y Serendipity 1.3S9y Serendipity 1.4.1S9y Serendipity 1.4S9y Serendipity 1.1.2S9y Serendipity 1.1S9y Serendipity 0.8S9y Serendipity 0.7.1S9y Serendipity 0.8.1S9y Serendipity 0.8.2S9y Serendipity 1.3.1S9y SerendipityS9y Serendipity 1.0.4S9y Serendipity 0.7
231
VMScore
CVE-2010-2957
Cross-site scripting (XSS) vulnerability in Serendipity prior to 1.5.4, when "Remember me" logins are enabled, allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
S9y Serendipity 0.7S9y Serendipity 1.0.4S9y Serendipity 1.1.4S9y Serendipity 1.1.1S9y Serendipity 1.4S9y Serendipity 1.2.1S9y Serendipity 1.2S9y Serendipity 1.0.2S9y Serendipity 1.0.1S9y Serendipity 1.0S9y Serendipity 0.9S9y Serendipity 0.8.5S9y Serendipity 0.8.2S9y Serendipity 1.1S9y Serendipity 1.5.1S9y Serendipity 0.5S9y Serendipity 0.4S9y Serendipity 0.3S9y Serendipity 0.8S9y Serendipity 0.6S9y Serendipity 0.8.4S9y Serendipity 0.9.1
383
VMScore
CVE-2007-6205
Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin (serendipity_plugin_remoterss) in S9Y Serendipity prior to 1.2.1 allows remote malicious users to inject arbitrary web script or HTML via a link in an RSS feed.
S9y Serendipity 0.4S9y Serendipity 0.5S9y Serendipity 0.7S9y Serendipity 0.7.1S9y Serendipity 0.8.1S9y Serendipity 0.8.2S9y Serendipity 0.8 Beta6S9y Serendipity 0.9S9y Serendipity 1.1.3S9y Serendipity 1.1.4S9y Serendipity 0.6 Pl1S9y Serendipity 0.6 Pl2S9y Serendipity 0.7 Beta3S9y Serendipity 0.7 Beta4S9y Serendipity 0.8.5S9y Serendipity 0.8 Beta 5S9y Serendipity 1.0.4S9y Serendipity 1.0 Beta1S9y Serendipity 0.5 Pl1S9y Serendipity 0.6S9y Serendipity 0.7 Beta1S9y Serendipity 0.7 Beta2
435
VMScore
CVE-2013-5314
Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1.6.2 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the serendipity[htmltarget] parameter.
S9y Serendipity 0.8.4S9y Serendipity 0.8.3S9y Serendipity 0.9.1S9y Serendipity 1.0.3S9y Serendipity 1.0.2S9y Serendipity 1.5.3S9y Serendipity 1.0.1S9y Serendipity 1.3S9y Serendipity 1.1.4S9y Serendipity 1.1.1S9y Serendipity 1.1.3S9y Serendipity 0.7.1S9y Serendipity 0.4S9y Serendipity 0.3S9y Serendipity 1.1S9y Serendipity 1.3.1S9y Serendipity 1.6S9y Serendipity 0.8.5S9y Serendipity 1.2.1S9y Serendipity 0.7S9y Serendipity 0.8.1S9y Serendipity 0.8.2
668
VMScore
CVE-2012-2762
SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote malicious users to execute arbitrary SQL commands via the url parameter to comment.php.
S9y Serendipity 1.5.3S9y Serendipity 1.5.2S9y Serendipity 1.1.4S9y Serendipity 1.1.3S9y Serendipity 1.0.1S9y Serendipity 1.0S9y Serendipity 0.8.1S9y Serendipity 0.8S9y Serendipity 1.5.5S9y Serendipity 1.5.4S9y Serendipity 1.2.1S9y Serendipity 1.2S9y Serendipity 1.0.3S9y Serendipity 1.0.2S9y Serendipity 0.8.3S9y Serendipity 0.8.2S9y Serendipity 1.5.1S9y Serendipity 1.4.1S9y Serendipity 1.1.2S9y Serendipity 1.1.1S9y Serendipity 0.9.1S9y Serendipity 0.9
435
VMScore
CVE-2012-2331
Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity prior to 1.6.1 allows remote malicious users to inject arbitrary web script or HTML via the serendipity[textarea] parameter. NOTE: this issue might be resultant from cross-...
S9y SerendipityS9y Serendipity 0.9.1S9y Serendipity 1.2.1S9y Serendipity 0.7.1S9y Serendipity 0.8.1S9y Serendipity 1.3S9y Serendipity 1.0S9y Serendipity 1.1S9y Serendipity 1.4S9y Serendipity 0.7S9y Serendipity 1.0.4S9y Serendipity 1.1.4S9y Serendipity 1.1.1S9y Serendipity 1.5.1S9y Serendipity 1.4.1S9y Serendipity 0.4S9y Serendipity 0.3S9y Serendipity 0.9S9y Serendipity 0.8.5S9y Serendipity 0.8.4S9y Serendipity 0.8.3S9y Serendipity 0.8.2
755
VMScore
CVE-2012-2332
SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity prior to 1.6.1 allows remote malicious users to execute arbitrary SQL commands via the serendipity[plugin_to_conf] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF)...
S9y Serendipity 0.8.4S9y Serendipity 0.9.1S9y Serendipity 1.1.1S9y Serendipity 0.7.1S9y Serendipity 1.5.4S9y Serendipity 1.5.3S9y Serendipity 0.4S9y Serendipity 1.1S9y Serendipity 1.2.1S9y Serendipity 1.2S9y Serendipity 0.7S9y Serendipity 1.0.4S9y Serendipity 1.3S9y Serendipity 1.1.2S9y Serendipity 1.0S9y Serendipity 1.5.1S9y Serendipity 1.4.1S9y SerendipityS9y Serendipity 0.9S9y Serendipity 0.8S9y Serendipity 0.8.1S9y Serendipity 1.6.1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook