Approved changes feed: RSS · Atom

cpe:2.3:a:s9y:serendipity:1.1:beta1:*:*:*:*:*:*

part: a version: 1.1 update: beta1

VendorS9Y (0745c483-6e7d-5cc0-b939-7ad3e8e7483a)
ProductSerendipity (80910be0-a47c-54b9-b1e6-b7600f9312ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/s9y/serendipity purl2cpe 2026-06-01 10:11:20.011561

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-2957 vulnerable 2026-06-08 04:55:11.819700 Details available
Cross-site scripting (XSS) vulnerability in Serendipity before 1.5.4, when "Remember me" logins are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Published: 2010-09-10T17:00:00.000Z
Updated: 2024-09-17T02:31:48.369Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-4412 vulnerable 2026-06-08 04:51:48.424789 Details available
Unrestricted file upload vulnerability in Serendipity before 1.5 allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension followed by a safe extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtained from third party information.
Published: 2009-12-24T16:00:00.000Z
Updated: 2024-08-07T07:01:20.415Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.