639 matches found
CVE-2011-1134
CVE-2011-1134 describes a Cross-Site Scripting (XSS) flaw in the Xinha editor bundled with Serendipity before version 1.5.5. The root cause is insufficient validation of client-side data by the web application, enabling remote attackers to execute arbitrary code in the image manager. Affected sof...
CVE-2011-1133
Removed by vendor...
CVE-2011-1133
Cross-Site Scripting XSS in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code via plugins/ExtendedFileManager/backend.php...
CVE-2011-1133
The CVE-2011-1133 entry describes a Cross-Site Scripting (XSS) vulnerability in Xinha, included in the Serendipity package prior to 1.5.5. The underlying issue is in plugins/ExtendedFileManager/backend.php, allowing remote attackers to execute arbitrary code via XSS. Affected software is Serendip...
CVE-2008-1066
The modifier.regexreplace.php plugin in Smarty before 2.6.19, as used by Serendipity S9Y and other products, allows attackers to call arbitrary PHP functions via templates, related to a '\0' character in a search string...
Serendipity <= 2.0.3 Multiple Vulnerabilities
Serendipity is prone to SQL injection SQLi and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Serendipity Code Injection Vulnerability
Serendipity is a PHP-based blogging system from the Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A code injection vulnerability exists in the 'serendipitymoveMediaDirectory' function in Serendipity version 2.0.3. The vulnerability stems from a...
FreeBSD : serendipity -- XSS (3ba87032-7fbd-11e9-8a5f-c85b76ce9b5a)
MITRE : Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/mediachoose.tpl Editor Preview feature or the templates/2k11/admin/mediaitems.tpl Media Library feature. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin we...
Design/Logic Flaw
serendipitymoveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename...
CVE-2016-10752
serendipitymoveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename...
CVE-2016-10752
serendipitymoveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename...
CVE-2016-10752
serendipitymoveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename...
CVE-2016-10752
serendipitymoveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename...
CVE-2016-10752
CVE-2016-10752 affects Serendipity 2.0.3 via the function serendipity_moveMediaDirectory. The vulnerability lets a remote attacker upload and execute arbitrary PHP code by exploiting an extensionless filename during a rename (demonstrated with a filename like "php"). Connected sources confirm the...
Serendipity < 2.1.5 XSS Vulnerability
Serendipity is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Information disclosure
Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/mediachoose.tpl Editor Preview feature or the templates/2k11/admin/mediaitems.tpl Media Library feature...
CVE-2019-11870
Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/mediachoose.tpl Editor Preview feature or the templates/2k11/admin/mediaitems.tpl Media Library feature...
CVE-2019-11870
Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/mediachoose.tpl Editor Preview feature or the templates/2k11/admin/mediaitems.tpl Media Library feature...
CVE-2019-11870
Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/mediachoose.tpl Editor Preview feature or the templates/2k11/admin/mediaitems.tpl Media Library feature...
CVE-2019-11870
Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin/mediachoose.tpl Editor Preview feature or the templates/2k11/admin/mediaitems.tpl Media Library feature...