Serendipity
Approved changes feed: RSS · Atom
cpe:2.3:a:serendipity:serendipity:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Serendipity (8f6a7687-9a6a-5dea-b0a5-5f846eb5e268) |
|---|---|
| Product | Serendipity (de112efb-c6cd-589a-ae45-d72850e91c10) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/volkerwiegand/serendipity |
purl2cpe | 2026-06-01 10:14:43.298664 |
pkg:github/s9y/serendipity |
purl2cpe | 2026-06-01 10:14:43.298666 |
pkg:sourceforge/php-blog |
purl2cpe | 2026-06-01 10:14:43.298667 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-58282 |
vulnerable | 2026-06-08 06:56:14.342926 |
Serendipity 2.5.0 Remote Code Execution via Authenticated Media Upload
Serendipity 2.5.0 contains a remote code execution vulnerability that allows authenticated administrators to upload malicious PHP files through the media upload functionality. Attackers can exploit the file upload mechanism by creating a PHP shell with a command execution form that enables arbitrary system command execution on the web server.
Published: 2025-12-10T21:14:19.900Z
Updated: 2026-04-07T14:08:35.515Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4090 |
vulnerable | 2026-06-08 04:59:29.225650 |
Details available
Serendipity before 1.6 has an XSS issue in the karma plugin which may allow privilege escalation.
Published: 2019-11-26T04:09:48.000Z
Updated: 2024-08-06T23:53:32.642Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1476 |
vulnerable | 2026-06-08 04:50:20.697714 |
Details available
Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks.
Published: 2008-03-24T22:00:00.000Z
Updated: 2024-08-07T08:24:41.805Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-6390 |
vulnerable | 2026-06-08 04:50:08.737066 |
Details available
Cross-site request forgery (CSRF) vulnerability in the mycalendar plugin before 0.13 for Serendipity allows remote attackers to perform actions as blog administrators, which can be leveraged to conduct cross-site scripting (XSS) attacks on the blog page.
Published: 2007-12-17T18:00:00.000Z
Updated: 2024-08-07T16:02:36.872Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5499 |
vulnerable | 2026-06-08 04:49:20.658581 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.
Published: 2006-10-25T10:00:00.000Z
Updated: 2024-08-07T19:55:52.926Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.