| Package | Affected versions | Patched versions |
|---|---|---|
| serendipity | = 2.4.0 |
Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension. Attackers can upload files with system command payloads to the media upload endpoint and execute arbitrary commands on the server.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free