CVE-2007-4282

The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...

CVE-2007-4282

The CVE refers to the Serendipity CMS: the entryproperties plugin in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and deliver custom entryproperties settings to the frontend by manipulating the password check. Impact is described as an authentication bypass; n...

CVE-2007-4282: Undefined Security Weakness

The "Extended properties for entries" entryproperties plugin in serendipityevententryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies th...

Serendipity <= 1.1.3 Authentication Bypass

Binary data 4163.prm...

Sql injection

SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipitymultiCat parameter...

CVE-2007-1326

SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipitymultiCat parameter...

CVE-2007-1326

SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipitymultiCat parameter...

CVE-2007-1326

The CVE-2007-1326 entry concerns a SQL injection in Serendipity 1.1.1. Affects index.php where the parameter serendipity[multiCat][] can be supplied by an attacker to execute arbitrary SQL commands. This is exploitable remotely and can compromise data integrity and confidentiality as described. T...

CVE-2007-1326

SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipitymultiCat parameter...

CVE-2007-1326: Undefined Security Weakness

SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipitymultiCat parameter...

serendipity-sql.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +--------------------------------------- - -- - | SaMuschie Research Labs proudly presents . . . +------------------------------------------- -- - - | Application: serendipity | Version: 1.1.1 others not testet | Vuln./Exploit Type: SQL-Injection |...

Serendipity unauthenticated SQL-Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 +--------------------------------------- - -- - | SaMuschie Research Labs proudly presents . . . +------------------------------------------- -- - - | Application: serendipity | Version: 1.1.1 others not testet | Vuln./Exploit Type: SQL-Injection |...

S9Y Serendipity 1.1.1 - index.php SQL Injection

S9Y Serendipity 1.1.1 - index.php SQL Injection source: https://www.securityfocus.com/bid/22774/info Serendipity is affected by an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. Exploiting this vulnerability coul...

Serendipity Lang.Inc.PHP本地文件包含漏洞

CVE: 2006-6242 Serendipity 是一款基于php的WEB应用程序。 Serendipity 不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以web权限查看系统文件内容。 问题是由于'Lang.Inc.PHP'脚本对用户提交的'entryid'参数缺少过滤，提交包含多个"../"字符作为参数数据，可绕过web root路径限制，以web权限查看系统文件内容。 0 S9Y Serendipity 1.0.3 S9Y Serendipity 0.9.1 S9Y Serendipity 0.8.2 S9Y Serendipity 0.8.1 S9Y...

CVE-2006-6242

Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. dot dot sequence in the serendipitycharset parameter in 1 include/lang.inc.php; or to plugins/ scripts 2...

CVE-2006-6242

Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. dot dot sequence in the serendipitycharset parameter in 1 include/lang.inc.php; or to plugins/ scripts 2...

CVE-2006-6242

Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. dot dot sequence in the serendipitycharset parameter in 1 include/lang.inc.php; or to plugins/ scripts 2...

CVE-2006-6242

CVE-2006-6242 affects Serendipity 1.0.3 and earlier. The issue is multiple directory traversal/local file inclusion (LFI) flaws triggered by an unsanitized serendipity[charset] parameter, allowing an attacker to read or include arbitrary local files. The basic entry points include include/lang.in...

CVE-2006-6242: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. dot dot sequence in the serendipitycharset parameter in 1 include/lang.inc.php; or to plugins/ scripts 2...

Serendipity &lt;= 1.0.3 (comment.php) Local File Include Exploit

No description provided by source. ? print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:+ +:+ +:+ ++ +:+ +++:++ ++ +:+ ++ ++ ++ ++ ++ ++ ++ ++ ++ + + + +++ + + ::::::::::: :::::::::: ::: :::: :::: :+: :+: :+: :+: +:+:+: :+:+:+ +:+ +:+ +:+ +:+ +:+...