CVEvulnerability
CVE-2006-5499
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-10-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.
Affected configurations
• serendipity serendipity (<= 1.0.1)
References
- http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html archives.neohapsis.com
- http://secunia.com/advisories/22501 Patch, Vendor Advisory
- http://securityreason.com/securityalert/1771 securityreason.com
- http://securitytracker.com/id?1017100 securitytracker.com
- http://www.hardened-php.net/advisory_112006.136.html www.hardened-php.net
- http://www.osvdb.org/29893 www.osvdb.org
- http://www.s9y.org/forums/viewtopic.php?t=7356 www.s9y.org
- http://www.securityfocus.com/archive/1/449189/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20627 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4135 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29695 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html archives.neohapsis.com
- http://secunia.com/advisories/22501 Patch, Vendor Advisory
- http://securityreason.com/securityalert/1771 securityreason.com
- http://securitytracker.com/id?1017100 securitytracker.com
- http://www.hardened-php.net/advisory_112006.136.html www.hardened-php.net
- http://www.osvdb.org/29893 www.osvdb.org
- http://www.s9y.org/forums/viewtopic.php?t=7356 www.s9y.org
- http://www.securityfocus.com/archive/1/449189/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20627 www.securityfocus.com
- http://www.vupen.com/english/advisories/2006/4135 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29695 exchange.xforce.ibmcloud.com