639 matches found
CVE-2005-1450
Unknown vulnerability in "the function used to validate path-names for uploading media" in Serendipity before 0.8 has unknown impact...
CVE-2005-1449
Unknown vulnerability in serendipityconfiglocal.inc.php for Serendipity before 0.8 has unknown impact...
CVE-2005-1451
The media manager in Serendipity before 0.8 allows remote attackers to upload and execute arbitrary 1 .php or 2 .shtml files...
CVE-2005-1450
Technical details are not publicly available in the provided documents. Monitor for updates from vendors and security advisories.
Serendipity BBCode Plugin XSS
According to its banner, the version of Serendipity installed on the remote host does not properly filter user-supplied input for selected fields if the BBCode plugin is enabled - it is not by default. By exploiting this flaw, an attacker can cause arbitrary HTML and script code to be executed by...
CVE-2005-1134
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 urlid or 2 entryid parameters...
CVE-2005-1134
Serendipity (0.8 and earlier) is affected by an SQL injection in exit.php. The vulnerability allows remote attackers to inject arbitrary SQL via the url_id or entry_id parameters, risking data disclosure and modification. Root cause: unsafe handling of user-supplied input in SQL queries. CVSS2 ba...
Serendipity exit.php Multiple Parameter SQL Injection
The version of Serendipity installed on the remote host allows an attacker to pass arbitrary SQL code through the 'urlid' and 'entryid' parameters of the 'exit.php' script. These flaws may lead to the disclosure / modification of data or attacks against the underlying database application...
Serendipity Detection
Serendipity, a PHP-based blog application, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18054; scriptversion"1.19"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Serendipity Detection";...
Serendipity < 0.72 exit.php Multiple Parameter SQL Injection
Binary data 2826.prm...
serendipity SQL Injection vulnerability
ADZ Security Team =================== Info Program: serentdipity web blog system Version: 0.8beta4 Module: exit.php Bug type: SQL Injection Vendor site: http://www.s9y.org/ Vendor Informed: Yes =================== Bug Info // code start //....... $links = serendipitydbquery"SELECT link FROM...
CVE-2005-1134
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 urlid or 2 entryid parameters...
Serendipity 0.8beta4 exit.php SQL Injection Exploit
No description provided by source. !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ Security Team...
S9Y Serendipity 0.8beta4 - exit.php SQL Injection
S9Y Serendipity 0.8beta4 - exit.php SQL Injection !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ...
Serendipity 0.8beta4 exit.php SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Serendipity 0.8beta4 exit.php SQL Injection Exploit =================================================== !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security...
S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection
!/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ Security Team 2004-2005\n"; print " C kreon 2005\n";...
CVE-2004-1620
CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in 1 index.php and 2 exit.php, or 3 the HTTP Referer field in comment.php...
CVE-2004-1620
CVE-2004-1620: Serendipity before 0.7rc1 has a CRLF injection (HTTP Response Splitting) allowing remote attackers to modify server HTML content via the url parameter in index.php and exit.php, or via the HTTP Referer header in comment.php. The vulnerability is exploitable remotely over the networ...
CVE-2004-2157
Cross-site scripting XSS vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.7-beta3, allows remote attackers to inject arbitrary HTML and PHP code via the 1 email or 2 username field...