Serendipity <= 2.0.5 Multiple Vulnerabilities

Serendipity is prone to multiple vulnerabilities because of insufficient CSRF protection / sanitized user-supplied input. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2017-5609

SQL injection vulnerability in include/functionsentries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via the cat parameter...

CVE-2017-5609

SQL injection vulnerability in include/functionsentries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via the cat parameter...

Sql injection

SQL injection vulnerability in include/functionsentries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via the cat parameter...

CVE-2017-5609

SQL injection vulnerability in include/functionsentries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via the cat parameter...

CVE-2017-5609

SQL injection vulnerability in include/functionsentries.inc.php in Serendipity 2.0.5 allows remote authenticated users to execute arbitrary SQL commands via the cat parameter...

CVE-2017-5609

CVE-2017-5609 affects Serendipity 2.0.5, specifically the include/functions_entries.inc.php file, where a SQL injection vulnerability exists via the cat parameter. The issue allows remote authenticated users to execute arbitrary SQL commands, potentially manipulating or extracting database data. ...

Serendipity Cross-Site Request Forgery Vulnerability

Serendipity is a PHP-based blogging system developed by Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A cross-site scripting vulnerability exists in Serendipity 2.0.5 and earlier versions of the Unexpected Events plugin or Sidebar plugin. It...

Serendipity Open Redirect Vulnerability

Serendipity is a PHP-based blogging system developed by Serendipity team. The system supports the creation of online journals, blogs, web pages and more. An open redirection vulnerability exists in comment.php in Serendipity in versions 2.0.5 and earlier, which allows remote attackers to redirect...

Serendipity Cross-Site Request Forgery Vulnerability (CNVD-2017-00771)

Serendipity is a PHP-based blogging system developed by Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A cross-site request forgery vulnerability exists in the comment.php page in Serendipity 2.0.5 and earlier versions, which allows attackers to...

Cross site request forgery (csrf)

Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin...

CVE-2017-5474

Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header...

CVE-2017-5475

comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments...

Cross site request forgery (csrf)

comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments...

Open redirect

Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header...

CVE-2017-5476

Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin...

CVE-2017-5476

Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin...

CVE-2017-5475

comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments...

CVE-2017-5475

CVE-2017-5475 affects Serendipity up to version 2.0.5, with a CSRF flaw in comment.php that enables deletion of comments. The Connected documents confirm the vulnerability is CSRF/XSRF in Serendipity’s comment handling, but do not provide explicit mitigation steps or affected patch versions beyon...

CVE-2017-5474

Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the HTTP Referer header...