639 matches found
CVE-2007-4282
The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...
CVE-2007-4282
The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...
Design/Logic Flaw
The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...
CVE-2007-4282
The CVE refers to the Serendipity CMS: the entryproperties plugin in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and deliver custom entryproperties settings to the frontend by manipulating the password check. Impact is described as an authentication bypass; n...
CVE-2007-4282
The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...
Serendipity <= 1.1.3 Authentication Bypass
Binary data 4163.prm...
CVE-2007-1326
SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipitymultiCat parameter...
Sql injection
SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipitymultiCat parameter...
CVE-2007-1326
SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipitymultiCat parameter...
CVE-2007-1326
SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipitymultiCat parameter...
CVE-2007-1326
The CVE-2007-1326 entry concerns a SQL injection in Serendipity 1.1.1. Affects index.php where the parameter serendipity[multiCat][] can be supplied by an attacker to execute arbitrary SQL commands. This is exploitable remotely and can compromise data integrity and confidentiality as described. T...
serendipity-sql.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +--------------------------------------- - -- - | SaMuschie Research Labs proudly presents . . . +------------------------------------------- -- - - | Application: serendipity | Version: 1.1.1 others not testet | Vuln./Exploit Type: SQL-Injection |...
Serendipity unauthenticated SQL-Injection
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +--------------------------------------- - -- - | SaMuschie Research Labs proudly presents . . . +------------------------------------------- -- - - | Application: serendipity | Version: 1.1.1 others not testet | Vuln./Exploit Type: SQL-Injection |...
S9Y Serendipity 1.1.1 - index.php SQL Injection
S9Y Serendipity 1.1.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/22774/info Serendipity is affected by an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this vulnerability coul...
Serendipity Lang.Inc.PHP本地文件包含漏洞
CVE: 2006-6242 Serendipity 是一款基于php的WEB应用程序。 Serendipity 不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以web权限查看系统文件内容。 问题是由于'Lang.Inc.PHP'脚本对用户提交的'entryid'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过web root路径限制，以web权限查看系统文件内容。 0 S9Y Serendipity 1.0.3 S9Y Serendipity 0.9.1 S9Y Serendipity 0.8.2 S9Y Serendipity 0.8.1 S9Y...
CVE-2006-6242
Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. dot dot sequence in the serendipitycharset parameter in 1 include/lang.inc.php; or to plugins/ scripts 2...
CVE-2006-6242
Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. dot dot sequence in the serendipitycharset parameter in 1 include/lang.inc.php; or to plugins/ scripts 2...
CVE-2006-6242
Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. dot dot sequence in the serendipitycharset parameter in 1 include/lang.inc.php; or to plugins/ scripts 2...
CVE-2006-6242
CVE-2006-6242 affects Serendipity 1.0.3 and earlier. The issue is multiple directory traversal/local file inclusion (LFI) flaws triggered by an unsanitized serendipity[charset] parameter, allowing an attacker to read or include arbitrary local files. The basic entry points include include/lang.in...
Serendipity <= 1.0.3 (comment.php) Local File Include Exploit
No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...