CVE-2012-2331

MEDIO 4.3CVE-2012-2331 · Published 13/08/2012 · updated 16/06/2026

En resumen

CVE-2012-2331 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a serendipity (s9y).
Probabilidad de explotación en los próximos 30 días (EPSS): 4.7%, mayor que el 91.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
serendipity s9y	`= 0.3= 0.4= 0.7= 0.7.1= 0.8= 0.8.1= 0.8.2= 0.8.3= 0.8.4= 0.8.5= 0.9= 0.9.1= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.2= 1.2.1= 1.3= 1.3.1= 1.4= 1.4.1= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.6.1≤ 1.6`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the serendipity[textarea] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF).

References

archives.neohapsis.com/archives/bugtraq/2012-05/0037.html
blog.s9y.org/archives/240-Serendipity-1.6.1-released.html
secunia.com/advisories/49009 · Vendor Advisory
koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt · Exploit
openwall.com/lists/oss-security/2012/05/08/6
openwall.com/lists/oss-security/2012/05/09/2
rul3z.de/index.php · Exploit
securityfocus.com/bid/53418 · Exploit
s9y/Serendipity commit 264bf55 · Exploit

Más vulnerabilidades de serendipity

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

serendipity

s9y

= 0.3= 0.4= 0.7= 0.7.1= 0.8= 0.8.1= 0.8.2= 0.8.3= 0.8.4= 0.8.5= 0.9= 0.9.1= 1.0= 1.0.1= 1.0.2= 1.0.3= 1.0.4= 1.1= 1.1.1= 1.1.2= 1.1.3= 1.1.4= 1.2= 1.2.1= 1.3= 1.3.1= 1.4= 1.4.1= 1.5.1= 1.5.2= 1.5.3= 1.5.4= 1.5.5= 1.6.1≤ 1.6

No fix yet

Description

Más vulnerabilidades de serendipity

Ver todo →