639 matches found
CVE-2011-3610
CVE-2011-3610 describes a cross-site scripting (XSS) vulnerability in the Serendipity freetag plugin, before version 3.30, in the tagcloud.swf file’s tagcloud parameter. The root cause, per CNVD-2020-13207, is a lack of proper validation of client-side data in the web application, enabling execut...
CVE-2011-3610
A Cross-site Scripting XSS vulnerability exists in the Serendipity freetag plugin before 3.30 in the tagcloud parameter to plugins/serendipityeventfreetag/tagcloud.swf...
CVE-2011-4090
Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation...
Privilege escalation
Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation...
CVE-2011-4090
Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation...
CVE-2011-4090
Summary: CVE-2011-4090 is tied to Serendipity before 1.6 with an XSS in the karma plugin that may lead to privilege escalation. The vulnerability affects the karma plugin in Serendipity installations prior to version 1.6 (no other products explicitly documented). The underlying issue is a cross-s...
CVE-2011-4090
Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation...
Serendipity Package Cross-Site Scripting Vulnerability
Serendipity is a PHP-based blogging system from the Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A cross-site scripting vulnerability exists in Xinha in Serendipity packages prior to version 1.5.5. The vulnerability stems from a lack of proper...
CVE-2011-1135
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...
CVE-2011-1133
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php...
CVE-2011-1135
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...
CVE-2011-1134
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager...
CVE-2011-1133
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php...
Cross site scripting
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...
Cross site scripting
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in the image manager...
CVE-2011-1135
CVE-2011-1135 affects Xinha as included in Serendipity before 1.5.5. The vulnerability is a Cross-Site Scripting (XSS) in certain plugins (ExtendedFileManager/manager.php and ImageManager/manager.php). The issue enables remote attackers to execute arbitrary code within the context of the affected...
CVE-2011-1135
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php...
CVE-2011-1135
Removed by vendor...