Unscored CVE-2004-2157 EUVD-2004-2149GHSA-8xf5-j5w3-2jx2

Cross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.7-beta3, allows remo…

Published Jul 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.7-beta3, allows remote attackers to inject arbitrary HTML and PHP code via the (1) email or (2) username field.

References

11269 vdb-entry
serendipity-commentphp-xss(17536) vdb-entry
1011448 vdb-entry
12673 third-party-advisory
20040928 Serendipity 0.7-beta1 SQL Injection PoC mailing-list