Serendipity XSS Flaw

The remote version of Serendipity is vulnerable to cross-site scripting attacks due to a lack of sanity checks on the 'searchTerm' parameter in the 'compat.php' script. With a specially crafted URL, an attacker can cause arbitrary code execution in a user's browser resulting in a loss of integrit...

CVE-2004-2525: Undefined Security Weakness

Cross-site scripting XSS vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable...

Serendipity < 0.7.1 compat.php searchTerm Parameter XSS

Binary data 2456.prm...

Serendipity compat.php searchTerm Parameter XSS

The remote version of Serendipity is vulnerable to cross-site scripting attacks due to a lack of sanity checks on the 'searchTerm' parameter in the 'compat.php' script. With a specially crafted URL, an attacker can cause arbitrary code execution in a user's browser resulting in a loss of integrit...