Skip to contentS9y Serendipity vulnerabilities
- s9y serendipityMultiple directory traversal vulnerabilities in Serendipity 1.0.3 and earlier allow remote...CVE-2006-6242Public exploit6.8 Medium
- s9y serendipityCross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0...CVE-2006-24957.5 High
- s9y serendipityconfig.php in S9Y Serendipity 1.0 beta 2 allows remote attackers to inject arbitrary PHP code by...CVE-2006-19107.5 High
- s9y serendipityCross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote...CVE-2005-31295.1 Medium
- s9y serendipityMultiple cross-site scripting (XSS) vulnerabilities in Serendipity 0.8 allow remote attackers to...CVE-2005-17134.3 Medium
- s9y serendipitySerendipity before 0.8 allows Chief users to "hide plugins installed by other users."CVE-2005-145210.0 High
- s9y serendipityThe media manager in Serendipity before 0.8 allows remote attackers to upload and execute...CVE-2005-14517.5 High
- s9y serendipityUnknown vulnerability in "the function used to validate path-names for uploading media" in...CVE-2005-14507.5 High
- s9y serendipityUnknown vulnerability in serendipity_config_local.inc.php for Serendipity before 0.8 has unknown...CVE-2005-144910.0 High
- s9y serendipityCross-site scripting (XSS) vulnerability in the BBCode plugin for Serendipity before 0.8 allows...CVE-2005-14486.8 Medium
- s9y serendipitySQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers...CVE-2005-1134Public exploit7.5 High
- s9y serendipityCross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote...CVE-2004-25254.3 Medium
- s9y serendipitySQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary...CVE-2004-2158Public exploit7.5 High
- s9y serendipityCross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly...CVE-2004-21574.3 Medium
- s9y serendipityCRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP...CVE-2004-1620Public exploit5.0 Medium