Serendipity@0.3 Security Vulnerabilities and Issues — Serendipity@0.3 CVE List

Lucene search

S9ySerendipity0.3

2 matches found

CVE•added 2006/12/03 7:28 p.m.•43 views

CVE-2006-6242

Multiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote attackers to read or include arbitrary local files via a .. (dot dot) sequence in the serendipity[charset] parameter in (1) include/lang.inc.php; or to plugins/ scripts (2) serendipity_event_bbcode/serendipit...

6.8CVSS6.8AI score0.04411EPSS

CVE•added 2006/05/20 3:2 a.m.•32 views

CVE-2006-2495

Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag.

7.5CVSS6.8AI score0.00717EPSS