CVE-2023-53932

概要

参考情報

• docs.s9y.org · Product
• exploit-db.com/exploits/51373 · Exploit
• vulncheck.com/advisories/serendipity-stored-cross-site-scripting-via-admin-entry-creation · Exploit

serendipity のその他の脆弱性

• CVE-2026-39971高 7.2Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the email sending functionality in include/functions.inc.php in…
• CVE-2026-39963中 6.9Serendipity is a PHP-powered weblog engine. In versions 2.6-beta2 and below, the serendipity_setCookie() function in include/functions_conf…
• CVE-2023-53933高 8.8Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .pha…
• CVE-2024-58282高 7.2Serendipity 2.5.0 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files thro…
• CVE-2023-31576高 8.8An arbitrary file upload vulnerability in Serendipity 2.4-beta1 allows attackers to execute arbitrary code via a crafted HTML or Javascript …