CVE-2020-10964

Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the filename of a renamed file may end with a dot. This file may then be renamed to have a .php filename...

CVE-2020-10964

CVE-2020-10964 affects Serendipity prior to 2.3.4 on Windows. The vulnerability arises because the filename of a renamed file may end with a dot, enabling the file to be renamed to have a .php filename, which can allow remote attackers to execute arbitrary code. The provided documents do not incl...