RSS   Podatności dla 'Serendipity'   RSS

2008-03-24
 
CVE-2008-1476

CWE-79
 
 
Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks.

 
2007-12-17
 
CVE-2007-6390

CWE-352
 
 
Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting (XSS) attacks on the blog page.

 
2007-08-09
 
CVE-2007-4282

 
 
The "Extended properties for entries" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies the password being checked.

 
2007-03-07
 
CVE-2007-1326

CWE-Other
 
 
SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[multiCat][] parameter.

 
2006-10-25
 
CVE-2006-5499

CWE-Other
 
 
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.

 

Copyright 2024, cxsecurity.com

 

Back to Top