FreeBSD Ports: serendipity

The remote host is missing an update to the system as announced in the referenced advisory. VID 9c133aa0-12bd-11dd-bab7-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-1386

Multiple cross-site scripting XSS vulnerabilities in the installer in Serendipity S9Y 1.3 allow remote attackers to inject arbitrary web script or HTML via 1 unspecified path fields or 2 the database host field. NOTE: the timing window for exploitation of this issue might be limited...

CVE-2008-1386

CVE-2008-1386 affects Serendipity (S9Y) 1.3 and its installer, where multiple XSS vulnerabilities exist in the installer (via unspecified path fields and the database host field) and in the referrer plugin of the blog application. The underlying issue is improper escaping that allows injection of...

s9y-xss.txt

Two smaller issues in s9y, published here: http://int21.de/cve/CVE-2008-1385-s9y.html http://int21.de/cve/CVE-2008-1386-s9y.html Cross Site Scripting XSS in serendipity 1.3 referrer plugin, CVE-2008-1385 References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1385 http://www.s9y.org/...

[Full-disclosure] Cross site scripting issues in s9y (CVE-2008-1386, CVE-2008-1387)

Two smaller issues in s9y, published here: http://int21.de/cve/CVE-2008-1386-s9y.html http://int21.de/cve/CVE-2008-1387-s9y.html Cross Site Scripting XSS in serendipity 1.3 referrer plugin, CVE-2008-1385 References https://vulners.com/cve/CVE-2008-1385 http://www.s9y.org/ Description In the...