Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
s9y vulnerabilities and exploits
(subscribe to this query)
383
VMScore
CVE-2015-6969
Cross-site scripting (XSS) vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity prior to 2.0.2 allows remote malicious users to inject arbitrary web script or HTML via a user name in a comment, which is not properly handled in a Reply link.
S9y Serendipity
383
VMScore
CVE-2014-9432
Multiple cross-site scripting (XSS) vulnerabilities in templates/2k11/admin/overview.inc.tpl in Serendipity prior to 2.0-rc2 allow remote malicious users to inject arbitrary web script or HTML via a blog comment in the QUERY_STRING to serendipity/index.php.
S9y Serendipity
312
VMScore
CVE-2015-8603
Cross-site scripting (XSS) vulnerability in Serendipity prior to 2.0.3 allows remote malicious users to inject arbitrary web script or HTML via the serendipity[entry_id] parameter in an "edit" admin action to serendipity_admin.php.
S9y Serendipity
516
VMScore
CVE-2017-5474
Open redirect vulnerability in comment.php in Serendipity up to and including 2.0.5 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header.
S9y Serendipity
605
VMScore
CVE-2017-5475
comment.php in Serendipity up to and including 2.0.5 allows CSRF in deleting any comments.
S9y Serendipity
605
VMScore
CVE-2017-5476
Serendipity up to and including 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin.
S9y Serendipity
383
VMScore
CVE-2011-1133
Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package prior to 1.5.5, allows remote malicious users to execute arbitrary code via plugins/ExtendedFileManager/backend.php.
S9y Serendipity
668
VMScore
CVE-2011-1134
Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package prior to 1.5.5, allows remote malicious users to execute arbitrary code in the image manager.
S9y Serendipity
383
VMScore
CVE-2011-1135
Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package prior to 1.5.5, allows remote malicious users to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php.
S9y Serendipity
312
VMScore
CVE-2016-9681
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity prior to 2.0.5 allow remote authenticated users to inject arbitrary web script or HTML via a category or directory name.
S9y Serendipity
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3380
CVE-2024-1694
local file inclusion
CVE-2024-5645
CVE-2024-24919
XSS
CVE-2024-36774
CVE-2024-21306
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »