CVE-2015-6943

概要

参考情報

• blog.curesec.com/article/blog/Serendipity-201-Blind-SQL-Injection-52.html · Exploit
• blog.s9y.org/archives/265-Serendipity-2.0.2-Security-Fix-Release.html · Patch
• packetstormsecurity.com/files/133428/Serendipity-2.0.1-Blind-SQL-Injection.html · Exploit
• seclists.org/fulldisclosure/2015/Sep/10 · Exploit
• securitytracker.com/id/1033558

serendipity のその他の脆弱性

• CVE-2026-39971高 7.2Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the email sending functionality in include/functions.inc.php in…
• CVE-2026-39963中 6.9Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the serendipity_setCookie() function in include/functions_conf…
• CVE-2023-53933高 8.8Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .pha…
• CVE-2023-53932中 5.4Serendipity 2.4.0 contains a stored cross-site scripting vulnerability that allows authenticated users to inject malicious scripts through b…
• CVE-2024-58282高 7.2Serendipity 2.5.0 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files thro…