EUVD-2007-0141

Malware in sbrugna...

Code injection

SerendipityNZ aka SimpleBoxes Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id...

CVE-2009-2165

SerendipityNZ aka SimpleBoxes Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id...

CVE-2009-2165

The CVE-2009-2165 entry affects SerendipityNZ’s Serene Bach (2.20R and earlier; 3.00 beta023 and earlier 3.x). The root issue is predictable session IDs, enabling remote attackers to hijack sessions and impersonate administrators to access or alter information. Documents from JVN/JVNDB indicate t...

CVE-2007-0137

Cross-site scripting XSS vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and earlier, and 2.08D and earlier in the 2.08 series; and 2 sb 1.13D and earlier, and 1.18R and earlier in the 1.18 series; allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and earlier, and 2.08D and earlier in the 2.08 series; and 2 sb 1.13D and earlier, and 1.18R and earlier in the 1.18 series; allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2007-0137

CVE-2007-0137 describes a cross-site scripting (XSS) vulnerability in Serene Bach components from SerendipityNZ: specifically SimpleBoxes/Serene Bach 2.05R and earlier and 2.08D and earlier in the 2.08 series, as well as sb 1.13D and earlier and 1.18R and earlier in the 1.18 series. The flaw allo...

CVE-2007-0137

Cross-site scripting XSS vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and earlier, and 2.08D and earlier in the 2.08 series; and 2 sb 1.13D and earlier, and 1.18R and earlier in the 1.18 series; allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...