Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
S9ySerendipity

4 matches found

CVE
CVE•added 2015/03/23 4:59 p.m.•38 views

CVE-2015-2289

Cross-site scripting (XSS) vulnerability in templates/2k11/admin/entries.tpl in Serendipity before 2.0.1 allows remote authenticated editors to inject arbitrary web script or HTML via the serendipity[cat][name] parameter to serendipity_admin.php, when creating a new category.

3.5CVSS5.4AI score0.00338EPSS
CVE
CVE•added 2015/09/16 2:59 p.m.•37 views

CVE-2015-6968

Multiple incomplete blacklist vulnerabilities in the serendipity_isActiveFile function in include/functions_images.inc.php in Serendipity before 2.0.2 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) .pht or (2) .phtml extension.

6.5CVSS7.5AI score0.00808EPSS
CVE
CVE•added 2015/09/15 6:59 p.m.•36 views

CVE-2015-6943

SQL injection vulnerability in the serendipity_checkCommentToken function in include/functions_comments.inc.php in Serendipity before 2.0.2, when "Use Tokens for Comment Moderation" is enabled, allows remote administrators to execute arbitrary SQL commands via the serendipity[id] parameter to seren...

6CVSS8.6AI score0.00252EPSS
CVE
CVE•added 2015/09/16 2:59 p.m.•36 views

CVE-2015-6969

Cross-site scripting (XSS) vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity before 2.0.2 allows remote attackers to inject arbitrary web script or HTML via a user name in a comment, which is not properly handled in a Reply link.

4.3CVSS5.8AI score0.00336EPSS