GCVE - cpe:2.3:a:s9y:serendipity:1.0.4:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:s9y:serendipity:1.0.4:*:*:*:*:*:*:*

part: a version: 1.0.4 update: *

Vendor	S9Y (`0745c483-6e7d-5cc0-b939-7ad3e8e7483a`)
Product	Serendipity (`80910be0-a47c-54b9-b1e6-b7600f9312ab`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/s9y/serendipity`	purl2cpe	2026-06-01 10:11:20.003167

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2013-5670`	vulnerable	2026-06-08 05:04:53.032143	Details available Cross-site scripting (XSS) vulnerability in spell-check-savedicts.php in the htmlarea SpellChecker module, as used in Serendipity before 1.7.3 and possibly other products, allows remote attackers to inject arbitrary web script or HTML via the to_r_list parameter. Published: 2013-11-05T18:00:00.000Z Updated: 2024-09-17T01:47:04.097Z Open on db.gcve.eu Reference links http://blog.s9y.org/archives/250-Serendipity-1.7.3-released.html http://www.opensyscom.fr/Actualites/serendipity-xss-vulnerability.html http://www.openwall.com/lists/oss-security/2013/09/01/3 http://www.osvdb.org/87395 http://www.openwall.com/lists/oss-security/2013/09/01/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-5314`	vulnerable	2026-06-08 05:04:51.221997	Details available Cross-site scripting (XSS) vulnerability in serendipity_admin_image_selector.php in Serendipity 1.6.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the serendipity[htmltarget] parameter. Published: 2013-08-19T20:00:00.000Z Updated: 2024-09-17T00:35:57.387Z Open on db.gcve.eu Reference links https://www.mavitunasecurity.com/xss-vulnerabilities-in-serendipity http://archives.neohapsis.com/archives/bugtraq/2013-07/0135.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2762`	vulnerable	2026-06-08 05:02:06.175556	Details available SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php. Published: 2012-06-07T19:00:00.000Z Updated: 2024-08-06T19:42:32.400Z Open on db.gcve.eu Reference links http://www.osvdb.org/82036 http://www.securityfocus.com/bid/53620 http://secunia.com/advisories/49234 https://exchange.xforce.ibmcloud.com/vulnerabilities/75760 https://www.htbridge.com/advisory/HTB23092	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2332`	vulnerable	2026-06-08 05:02:03.629983	Details available SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity before 1.6.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[plugin_to_conf] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF). Published: 2012-08-13T23:00:00.000Z Updated: 2024-09-17T02:52:09.359Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/05/08/6 http://www.rul3z.de/index.php?/214-KORAMISADV2012-001-Serendipity-1.6-Backend-Cross-Site-Scripting-and-SQL-Injection-vulnerability.html http://www.securityfocus.com/bid/53418 http://www.koramis.com/advisories/2012/KORAMIS-ADV2012-001.txt http://www.openwall.com/lists/oss-security/2012/05/09/2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-2331`	vulnerable	2026-06-08 05:02:03.618886	Details available Cross-site scripting (XSS) vulnerability in serendipity/serendipity_admin_image_selector.php in Serendipity before 1.6.1 allows remote attackers to inject arbitrary web script or HTML via the serendipity[textarea] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF). Published: 2012-08-13T23:00:00.000Z Updated: 2024-09-16T22:55:59.188Z Open on db.gcve.eu Reference links http://www.openwall.com/lists/oss-security/2012/05/08/6 http://www.rul3z.de/index.php?/214-KORAMISADV2012-001-Serendipity-1.6-Backend-Cross-Site-Scripting-and-SQL-Injection-vulnerability.html https://github.com/s9y/Serendipity/commit/264bf55719baacc069ff9d3cc35f0c349cde11e3 http://www.securityfocus.com/bid/53418 http://secunia.com/advisories/49009	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2957`	vulnerable	2026-06-08 04:55:11.818535	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1916`	vulnerable	2026-06-08 04:54:10.963291	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-4412`	vulnerable	2026-06-08 04:51:48.423610	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1385`	vulnerable	2026-06-08 04:50:20.366181	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-0124`	vulnerable	2026-06-08 04:50:10.320961	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-6205`	vulnerable	2026-06-08 04:50:08.231171	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.