Description
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.
References
- 20061019 Advisory 11/2006: Serendipity Weblog XSS Vulnerabilities mailing-list
- 1771 third-party-advisory
- 20627 vdb-entry
- 29893 vdb-entry
- http://www.hardened-php.net/advisory_112006.136.html
- serendipity-admin-xss(29695) vdb-entry
- 22501 third-party-advisory
- 1017100 vdb-entry
- 20061019 Advisory 11/2006: Serendipity Weblog XSS Vulnerabilities mailing-list
- http://www.s9y.org/forums/viewtopic.php?t=7356
- ADV-2006-4135 vdb-entry