EUVD-2016-1734

Malware in sbrugna...

Default credentials

Serendipity 2.0.4 has XSS via the serendipityadmin.php serendipitybody parameter...

CVE-2016-10737

Serendipity 2.0.4 has XSS via the serendipityadmin.php serendipitybody parameter...

CVE-2016-10737

Serendipity 2.0.4 has XSS via the serendipityadmin.php serendipitybody parameter...

CVE-2016-10737: Improper Neutralization of Input During Web Page Generation

Serendipity 2.0.4 has XSS via the serendipityadmin.php serendipitybody parameter...

CVE-2015-8603: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Serendipity before 2.0.3 allows remote attackers to inject arbitrary web script or HTML via the serendipityentryid parameter in an "edit" admin action to serendipityadmin.php...

CVE-2015-6943: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the serendipitycheckCommentToken function in include/functionscomments.inc.php in Serendipity before 2.0.2, when "Use Tokens for Comment Moderation" is enabled, allows remote administrators to execute arbitrary SQL commands via the serendipityid parameter to...

CVE-2015-2289: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in templates/2k11/admin/entries.tpl in Serendipity before 2.0.1 allows remote authenticated editors to inject arbitrary web script or HTML via the serendipitycatname parameter to serendipityadmin.php, when creating a new category...

CVE-2012-2332: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in serendipity/serendipityadmin.php in Serendipity before 1.6.1 allows remote attackers to execute arbitrary SQL commands via the serendipityplugintoconf parameter. NOTE: this issue might be resultant from cross-site request forgery CSRF...

CVE-2005-3129

Cross-site request forgery CSRF vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipityadmin.php...

CVE-2005-3129

CVE-2005-3129 describes a CSRF vulnerability in Serendipity 0.8.4 and earlier. The issue allows remote attackers to perform unauthorized actions as a logged-in user through a link or an IMG tag to serendipity_admin.php. The supplied documents do not provide remediation steps or patch/version deta...

CVE-2005-3129: Undefined Security Weakness

Cross-site request forgery CSRF vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipityadmin.php...