CVE-2017-1000129

CVE-2017-1000129 affects Serendipity 2.0.3, where a SQL injection in the blog component can lead to information disclosure. The vulnerability is due to unsafely constructed SQL queries in the blog module, enabling an attacker to retrieve data. Public references indicate a patch/release to address...

Serendipity < 2.1.1 Multiple Vulnerabilities

According to its banner, the version of Serendipity running on the remote host is prior to 2.1.1. It is, therefore, affected by multiple vulnerabilities : - A stored cross-site scripting XSS vulnerability exists in the templates/2k11/admin/category.inc.tpl script due to improper validation of the...

Serendipity Cross-Site Request Forgery Vulnerability

Serendipity is scalable PHP-powered weblog engine. A cross-site request forgery vulnerability in Serendipity 2.0.5 allows attackers to install any theme via a GET request...

Serendipity Cross-Site Scripting Vulnerability

Serendipity is scalable PHP-driven weblog engine. A cross-site scripting vulnerability exists in Serendipity version 2.1-rc1. A remote attacker can exploit this vulnerability to steal administrator cookies or other information...

CVE-2017-8101

There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request...

Cross site request forgery (csrf)

There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request...

CVE-2017-8101

There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request...

CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...

CVE-2017-8101

There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request...

Cross site scripting

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...

CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...

CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...

CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other information by composing a new entry as an editor user. This is related to lack of the serendipityeventxsstrust plugin and a setconfig error in that plugin...

CVE-2017-8101

There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request...

CVE-2017-8101

CVE-2017-8101 describes a CSRF vulnerability in Serendipity 2.0.5 that allows attackers to install themes via a GET request. Multiple sources (NVD entry, Red Hat, CNVD, OSV, CVE listing, Ubuntu, CVE List) corroborate the issue. The core detail across documents is that the vulnerability stems from...

CVE-2017-8102

Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin’s cookie and other information by crafting a new entry as an editor user. The root cause is related to the absence of the serendipity_event_xsstrust plugin and a set_config error in that plugin. No explicit remediation is pro...

S9Y Serendipity Cross-Site Request Forgery Vulnerability

Serendipity is a PHP-based blogging system. The system supports the creation of online journals, blogs, web pages and more. A cross-site request forgery vulnerability exists in versions prior to S9Y Serendipity 2.0.5 due to the program failing to properly validate HTTP requests. A remote attacker...

s9y Serendipity Cross Site Request Forgery Vulnerability

Exploit for php platform in category web applications Details ====== Software: s9y Serendipity Version: Mitigations ======= update to Serendipity v2.1.x ======== FIX: ========== https://github.com/s9y/Serendipity/issues/452 Best regards, Zhiyang Zeng of Tencent security platform department...

s9y Serendipity Cross Site Request Forgery

Details ====== Software: s9y Serendipity Version: Mitigations ======= update to Serendipity v2.1.x ======== FIX: ========== https://github.com/s9y/Serendipity/issues/452 Best regards, Zhiyang Zeng of Tencent security platform department...

Serendipity include/functions_entries.inc.php SQL Injection Vulnerability

Serendipity is a WEB application. Serendipity include/functionsentries.inc.php suffers from a SQL injection vulnerability that allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...