Serendipity Code Injection Vulnerability

Serendipity is a PHP-based blogging system from the Serendipity team. The system supports the creation of online journals, blogs, web pages and more. A code injection vulnerability exists in the 'serendipitymoveMediaDirectory' function in Serendipity version 2.0.3. The vulnerability stems from a...

CVE-2016-10752: Unrestricted Upload of File with Dangerous Type

serendipitymoveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute arbitrary PHP code because it mishandles an extensionless filename during a rename, as demonstrated by "php" as a filename...