CVE-2016-10752

serendipitymoveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename...

CVE-2016-10752

creationtimestamp| type| source ---|---|--- 2019-05-24 18:48:33+00:00| seen| https://t.me/cvemitreorg/323 2019-05-24 22:26:23+00:00| seen| https://t.me/cibsecurity/4541...

CVE-2016-10752

CVE-2016-10752 affects Serendipity 2.0.3 via the function serendipity_moveMediaDirectory. The vulnerability lets a remote attacker upload and execute arbitrary PHP code by exploiting an extensionless filename during a rename (demonstrated with a filename like "php"). Connected sources confirm the...