CVE-2007-4282

2007-08-09T21:17:00
ID CVE-2007-4282
Type cve
Reporter cve@mitre.org
Modified 2017-07-29T01:32:00

Description

The "Extended properties for entries" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies the password being checked.