Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2004-2525

Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 67.8%
CVSS Severity
CVSS v2 Score 4.3
Products affected by CVE-2004-2525
  • S9y » Serendipity » Version: 0.3
    cpe:2.3:a:s9y:serendipity:0.3
  • S9y » Serendipity » Version: 0.4
    cpe:2.3:a:s9y:serendipity:0.4
  • S9y » Serendipity » Version: 0.5
    cpe:2.3:a:s9y:serendipity:0.5
  • S9y » Serendipity » Version: 0.5_pl1
    cpe:2.3:a:s9y:serendipity:0.5_pl1
  • S9y » Serendipity » Version: 0.6
    cpe:2.3:a:s9y:serendipity:0.6
  • S9y » Serendipity » Version: 0.6_pl1
    cpe:2.3:a:s9y:serendipity:0.6_pl1
  • S9y » Serendipity » Version: 0.6_pl2
    cpe:2.3:a:s9y:serendipity:0.6_pl2
  • S9y » Serendipity » Version: 0.6_pl3
    cpe:2.3:a:s9y:serendipity:0.6_pl3
  • S9y » Serendipity » Version: 0.6_rc1
    cpe:2.3:a:s9y:serendipity:0.6_rc1
  • S9y » Serendipity » Version: 0.6_rc2
    cpe:2.3:a:s9y:serendipity:0.6_rc2
  • S9y » Serendipity » Version: 0.7
    cpe:2.3:a:s9y:serendipity:0.7
  • S9y » Serendipity » Version: 0.7_beta1
    cpe:2.3:a:s9y:serendipity:0.7_beta1
  • S9y » Serendipity » Version: 0.7_beta2
    cpe:2.3:a:s9y:serendipity:0.7_beta2
  • S9y » Serendipity » Version: 0.7_beta3
    cpe:2.3:a:s9y:serendipity:0.7_beta3
  • S9y » Serendipity » Version: 0.7_beta4
    cpe:2.3:a:s9y:serendipity:0.7_beta4
  • S9y » Serendipity » Version: 0.7_rc1
    cpe:2.3:a:s9y:serendipity:0.7_rc1


Contact Us

Shodan ® - All rights reserved