S9y vulnerabilities

Products

• Serendipity 62
• Serendipity Event Freetag 3

Newest

• s9y serendipity Serendipity before 2.6.0 SSRF via hex IPv4 and IPv6 addresses CVE-2026-73629 8.4 HighAugust 13, 2026
• s9y serendipity Serendipity 2.3.5 Reflected XSS via search clean-URL route CVE-2026-73628 5.3 MediumAugust 13, 2026
• s9y serendipity Serendipity < 2.6.1 Open Redirect via exit.php CVE-2026-67350 2.1 LowJuly 31, 2026
• s9y serendipity Serendipity < 2.6.1 Authentication Bypass via Username Collision CVE-2026-67351 8.7 HighJuly 30, 2026
• s9y serendipity Serendipity: Host Header Injection leads to SMTP header injection via unvalidated HTTP_HOST CVE-2026-39971 Fix available 7.2 HighApril 14, 2026
• s9y serendipity Serendipity: Host Header Injection enables authentication cookie scoping to an attacker-controlled domain CVE-2026-39963 Fix available 6.9 MediumApril 14, 2026
• s9y serendipity Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload CVE-2023-53933 8.7 HighDecember 17, 2025
• s9y serendipity Serendipity 2.4.0 Stored Cross-Site Scripting via Admin Entry Creation CVE-2023-53932 5.1 MediumDecember 17, 2025
• s9y serendipity Serendipity 2.5.0 Remote Code Execution via Authenticated Media Upload CVE-2024-58282 8.6 HighDecember 10, 2025
• s9y serendipity An arbitrary file upload vulnerability in Serendipity 2.4-beta1 allows attackers to execute... CVE-2023-31576 8.8 HighMay 16, 2023
• s9y serendipity Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the... CVE-2020-10964 9.8 CriticalMarch 25, 2020
• serendipity freetag plugin, s9y serendipity event freetag +1 more A Cross-site Scripting (XSS) vulnerability exists in the Serendipity freetag plugin before 3.30... CVE-2011-3610 6.1 MediumJanuary 22, 2020
• s9y serendipity Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation. CVE-2011-4090 Public exploit 6.1 MediumNovember 26, 2019
• s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows... CVE-2011-1135 6.1 MediumNovember 5, 2019
• s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows... CVE-2011-1134 9.8 CriticalNovember 5, 2019
• s9y serendipity Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows... CVE-2011-1133 6.1 MediumNovember 5, 2019
• s9y serendipity serendipity_moveMediaDirectory in Serendipity 2.0.3 allows remote attackers to upload and execute... CVE-2016-10752 9.8 CriticalMay 24, 2019
• s9y serendipity Serendipity before 2.1.5 has XSS via EXIF data that is mishandled in the templates/2k11/admin... CVE-2019-11870 6.1 MediumMay 9, 2019
• s9y serendipity Serendipity 2.0.4 has XSS via the serendipity_admin.php serendipity[body] parameter. CVE-2016-10737 5.4 MediumJanuary 16, 2019
• s9y serendipity Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information... CVE-2017-1000129 7.5 HighNovember 17, 2017
• s9y serendipity Stored XSS in Serendipity v2.1-rc1 allows an attacker to steal an admin's cookie and other... CVE-2017-8102 5.4 MediumApril 24, 2017
• s9y serendipity There is CSRF in Serendipity 2.0.5, allowing attackers to install any themes via a GET request. CVE-2017-8101 8.8 HighApril 24, 2017
• s9y serendipity SQL injection vulnerability in include/functions_entries.inc.php in Serendipity 2.0.5 allows... CVE-2017-5609 8.8 HighJanuary 28, 2017
• s9y serendipity Serendipity through 2.0.5 allows CSRF for the installation of an event plugin or a sidebar plugin. CVE-2017-5476 8.8 HighJanuary 14, 2017
• s9y serendipity comment.php in Serendipity through 2.0.5 allows CSRF in deleting any comments. CVE-2017-5475 8.8 HighJanuary 14, 2017
• s9y serendipity Open redirect vulnerability in comment.php in Serendipity through 2.0.5 allows remote attackers... CVE-2017-5474 6.1 MediumJanuary 14, 2017
• s9y serendipity include/functions_installer.inc.php in Serendipity through 2.0.5 is vulnerable to File Inclusion... CVE-2016-10082 9.8 CriticalDecember 30, 2016
• s9y serendipity Multiple cross-site scripting (XSS) vulnerabilities in Serendipity before 2.0.5 allow remote... CVE-2016-9681 5.4 MediumDecember 25, 2016
• s9y serendipity In Serendipity before 2.0.5, an attacker can bypass SSRF protection by using a malformed IP... CVE-2016-9752 8.6 HighDecember 1, 2016
• s9y serendipity Cross-site scripting (XSS) vulnerability in Serendipity before 2.0.3 allows remote attackers to... CVE-2015-8603 5.4 MediumJanuary 12, 2016
• s9y serendipity Cross-site scripting (XSS) vulnerability in js/2k11.min.js in the 2k11 theme in Serendipity... CVE-2015-6969 4.3 MediumSeptember 16, 2015
• s9y serendipity Multiple incomplete blacklist vulnerabilities in the serendipity_isActiveFile function in include... CVE-2015-6968 6.5 MediumSeptember 16, 2015
• s9y serendipity SQL injection vulnerability in the serendipity_checkCommentToken function in include... CVE-2015-6943 6.0 MediumSeptember 15, 2015
• s9y serendipity Cross-site scripting (XSS) vulnerability in templates/2k11/admin/entries.tpl in Serendipity... CVE-2015-2289 3.5 LowMarch 23, 2015
• s9y serendipity Multiple cross-site scripting (XSS) vulnerabilities in templates/2k11/admin/overview.inc.tpl in... CVE-2014-9432 4.3 MediumDecember 31, 2014
• s9y serendipity Cross-site scripting (XSS) vulnerability in spell-check-savedicts.php in the htmlarea... CVE-2013-5670 4.3 MediumNovember 5, 2013
• s9y serendipity Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1... CVE-2013-5314 Public exploit 4.3 MediumAugust 19, 2013
• s9y serendipity SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity before 1.6.1... CVE-2012-2332 Public exploit 7.5 HighAugust 13, 2012
• s9y serendipity Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in... CVE-2012-2331 Public exploit 4.3 MediumAugust 13, 2012
• s9y serendipity SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows... CVE-2012-2762 7.5 HighJune 7, 2012
• s9y serendipity Serendipity 1.5.5 allows remote attackers to obtain sensitive information via a direct request to... CVE-2011-3800 5.0 MediumSeptember 24, 2011
• s9y serendipity Cross-site scripting (XSS) vulnerability in Serendipity before 1.5.4, when "Remember me" logins... CVE-2010-2957 2.6 LowSeptember 10, 2010
• s9y serendipity, xinha wysiwyg editor +1 more The dynamic configuration feature in Xinha WYSIWYG editor 0.96 Beta 2 and earlier, as used in... CVE-2010-1916 7.5 HighMay 12, 2010
• s9y serendipity Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated... CVE-2009-4412 6.0 MediumDecember 24, 2009
• s9y serendipity event freetag SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for... CVE-2009-3337 7.5 HighSeptember 24, 2009
• s9y serendipity Multiple cross-site scripting (XSS) vulnerabilities in the installer in Serendipity (S9Y) 1.3... CVE-2008-1386 4.3 MediumApril 23, 2008
• s9y serendipity Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in... CVE-2008-1385 Public exploit 4.3 MediumApril 23, 2008
• s9y serendipity Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3-beta1 allows remote... CVE-2008-0124 4.3 MediumFebruary 28, 2008
• s9y serendipity event freetag Cross-site scripting (XSS) vulnerability in the Freetag before 2.96 plugin for S9Y Serendipity,... CVE-2008-0751 Public exploit 4.3 MediumFebruary 13, 2008
• s9y serendipity Cross-site scripting (XSS) vulnerability in the remote RSS sidebar plugin ... CVE-2007-6205 4.3 MediumDecember 11, 2007
• Show olderLoading…