775 matches found
CVE-2005-1134
Serendipity (0.8 and earlier) is affected by an SQL injection in exit.php. The vulnerability allows remote attackers to inject arbitrary SQL via the url_id or entry_id parameters, risking data disclosure and modification. Root cause: unsafe handling of user-supplied input in SQL queries. CVSS2 ba...
CVE-2005-1134: Undefined Security Weakness
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 urlid or 2 entryid parameters...
Serendipity exit.php Multiple Parameter SQL Injection
The version of Serendipity installed on the remote host allows an attacker to pass arbitrary SQL code through the 'urlid' and 'entryid' parameters of the 'exit.php' script. These flaws may lead to the disclosure / modification of data or attacks against the underlying database application...
Serendipity Detection
Serendipity, a PHP-based blog application, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid18054; scriptversion"1.19"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Serendipity Detection";...
Serendipity < 0.72 exit.php Multiple Parameter SQL Injection
Binary data 2826.prm...
serendipity SQL Injection vulnerability
ADZ Security Team =================== Info Program: serentdipity web blog system Version: 0.8beta4 Module: exit.php Bug type: SQL Injection Vendor site: http://www.s9y.org/ Vendor Informed: Yes =================== Bug Info // code start //....... $links = serendipitydbquery"SELECT link FROM...
CVE-2005-1134
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 urlid or 2 entryid parameters...
S9Y Serendipity 0.8beta4 - exit.php SQL Injection
S9Y Serendipity 0.8beta4 - exit.php SQL Injection !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ...
Serendipity 0.8beta4 exit.php SQL Injection Exploit
No description provided by source. !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ Security Team...
Serendipity 0.8beta4 exit.php SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== Serendipity 0.8beta4 exit.php SQL Injection Exploit =================================================== !/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security...
S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection
!/usr/bin/perl Serendipity 0.8beta4 exit.php SQL Injection exploit c ADZ Security Team 2004-2005 c kreon 2005 http://adz.void.ru/ [email protected] Public : print "\n\n"; print " Serendipity 0.8beta4 exit.php SQL Injection exploit\n"; print " C ADZ Security Team 2004-2005\n"; print " C kreon 2005\n";...
CVE-2004-1620
CVE-2004-1620: Serendipity before 0.7rc1 has a CRLF injection (HTTP Response Splitting) allowing remote attackers to modify server HTML content via the url parameter in index.php and exit.php, or via the HTTP Referer header in comment.php. The vulnerability is exploitable remotely over the networ...
CVE-2004-1620
CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in 1 index.php and 2 exit.php, or 3 the HTTP Referer field in comment.php...
CVE-2004-1620: Undefined Security Weakness
CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in 1 index.php and 2 exit.php, or 3 the HTTP Referer field in comment.php...
CVE-2004-2525
Cross-site scripting XSS vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable...
CVE-2004-2157
Cross-site scripting XSS vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.7-beta3, allows remote attackers to inject arbitrary HTML and PHP code via the 1 email or 2 username field...
CVE-2004-2158
SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entryid parameter to 1 exit.php or 2 comment.php...
Serendipity < 0.7.1 compat.php searchTerm Parameter XSS
Binary data 2456.prm...
Serendipity compat.php searchTerm Parameter XSS
The remote version of Serendipity is vulnerable to cross-site scripting attacks due to a lack of sanity checks on the 'searchTerm' parameter in the 'compat.php' script. With a specially crafted URL, an attacker can cause arbitrary code execution in a user's browser resulting in a loss of integrit...
[SA13357] Serendipity "searchTerm" Cross-Site Scripting Vulnerability
TITLE: Serendipity "searchTerm" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA13357 VERIFY ADVISORY: http://secunia.com/advisories/13357/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Serendipity 0.x http://secunia.com/product/3969/ DESCRIPTION:...