CVE-2026-67350

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...

CVE-2026-67350 Serendipity < 2.6.1 Open Redirect via exit.php

Serendipity before 2.6.1 contains an open redirect vulnerability in exit.php that allows unauthenticated attackers to redirect users to arbitrary external sites by supplying a malicious Base64-encoded url parameter when the Track Exits plugin is configured with commentredirection set to s9y...

PT-2026-66760

Name of the Vulnerable Software and Affected Versions Serendipity versions prior to 2.6.1 Description An open redirect issue exists in the 'exit.php' endpoint. Unauthenticated attackers can redirect users to arbitrary external sites by providing a malicious Base64-encoded url parameter. This occu...

EUVD-2005-1137

Malware in sbrugna...

Hanno's projects: Open redirect in Serendipity (exit.php)

Summary Serendipity contains a script named exit.php that can be directly accessed. When crafting an hyperlink pointing to this page with the parameter url containing a base64-encoded URL, it will redirect the user to this URL. Description The file exit.php contains the following code: php ?php /...

theledge.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-189032 Description| Value ---|--- Affected Website:| theledge.net Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

admins.li Open Redirect vulnerability

Vulnerable URL: http://www.admins.li/exit.php?url=aHR0cHM6Ly93d3cub3BlbmJ1Z2JvdW50eS5vcmcv Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| Open Redirect Vulnerability status:| Publicly disclosed Alexa Rank| 14617776 VIP website status:| No...

Serendipity exit.php Multiple Parameter SQL Injection

The version of Serendipity installed on the remote host allows an attacker to pass arbitrary SQL code through the 'urlid' and 'entryid' parameters of the 'exit.php' script. These flaws may lead to the disclosure / modification of data or attacks against the underlying database application...

S9Y Serendipity 0.8beta4 - exit.php SQL Injection

S9Y Serendipity 0.8beta4 - exit.php SQL Injection !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ...

S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection

!/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ Security Team 2004-2005\n"; print " C kreon 2005\n";...