Lucene search

K
f5F5F5:K85243532
HistoryJan 27, 2017 - 12:00 a.m.

K85243532 : Serendipity vulnerability CVE-2016-10082

2017-01-2700:00:00
my.f5.com
19

AI Score

9.6

Confidence

High

EPSS

0.006

Percentile

78.5%

Security Advisory Description

include/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion and a possible Code Execution attack during a first-time installation because it fails to sanitize the dbType POST parameter before adding it to an include() call in the bundled-libs/serendipity_generateFTPChecksums.php file.(CVE-2016-10082)
Impact
There is no impact; F5 products are not affected by this vulnerability.

AI Score

9.6

Confidence

High

EPSS

0.006

Percentile

78.5%