XSS (cross site scripting) vulnerability in Serendipity

Vulnerability ID: HTB22595 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinserendipity.html Product: Serendipity Vendor: Serendipity Team http://www.s9y.org/ Vulnerable Version: 1.5.3 and probably prior versions Vendor Notification: 26 August 2010 Vulnerability Type: Stored XSS Cross...

Serendipity 1.5.3 Cross Site Scripting

Vulnerability ID: HTB22595 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinserendipity.html Product: Serendipity Vendor: Serendipity Team http://www.s9y.org/ Vulnerable Version: 1.5.3 and probably prior versions Vendor Notification: 26 August 2010 Vulnerability Type: Stored XSS Cross...

CVE-2010-2957

Cross-site scripting XSS vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2957

Cross-site scripting XSS vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2957

Cross-site scripting XSS vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2957

CVE-2010-2957 affects Serendipity prior to 1.5.4. The issue is an XSS vulnerability that can allow remote attackers to inject arbitrary script/HTML when the Remember me login is enabled. Descriptions consistently cite XSS with unspecified vectors; a related advisory notes exploitation requires a ...

Cross-site Request Forgery (CSRF) in Serendipity

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Serendipity which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in Serendipity: CVE-2010-2957 The vulnerability exists due to insufficient validation of the request orig...

Fedora 13 : xinha-0.96.1-2.fc13 (2010-9320)

Name: CVE-2010-1916 URL: https://vulners.com/cve/CVE-2009-1916 Assigned: 20100511 Reference: MISC: http://www.php-security.org/2010/05/10/mops-2010-019-serendipity-wysiw yg-editor-plugin-configuration-injection-vulnerability/index.html Reference: MISC:...

Serendipity < 1.5.3 'Xinha WYSIWYG' Editor Security Bypass Vulnerability

Serendipity is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:s9y:serendipity";...

Serendipity 'Xinha WYSIWYG' Editor Security Bypass Vulnerability

This host is running Serendipity and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbserendipitysecbypassvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ Serendipity 'Xinha WYSIWYG' Editor Security Bypass Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2010...

CVE-2010-1916

Removed by vendor...

MOPS-2010-019: Serendipity WYSIWYG Editor Plugin Configuration Injection Vulnerability

MOPS-2010-019: Serendipity WYSIWYG Editor Plugin Configuration Injection Vulnerability May 10th, 2010 A preauth plugin configuration injection vulnerability was discovered in the WYSIWYG editor Xinha bundled with Serendipity Weblog that allows e.g. uploading arbitrary PHP files to the webserver...

Serendipity < 1.5 File Extension Processing Arbitrary File Upload Vulnerability

Serendipity is prone to arbitrary file upload vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:s9y:serendipity";...

Unrestricted file upload

Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of...

CVE-2009-4412

Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of...

CVE-2009-4412

Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of...

CVE-2009-4412

Summary : CVE-2009-4412 is an unrestricted file upload vulnerability in Serendipity prior to version 1.5. What’s affected : Serendipity (s9y) software; vulnerable component is the file upload handling that accepts an executable extension followed by a safe extension. Root cause : Remote authentic...

CVE-2009-4412

Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of...

CVE-2009-3337

SQL injection vulnerability in the Freetag serendipityeventfreetag plugin before 3.09 for Serendipity S9Y allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry...