CVE-2008-1476 Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks.
MediumCVSS 4.3
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in Serendipity (S9Y) before 1.3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to received trackbacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| serendipity | <= 1.2.1 | No fix listed |
| serendipity | = 0.3 | No fix listed |
| serendipity | = 0.4 | No fix listed |
| serendipity | = 0.5_pl1 | No fix listed |
| serendipity | = 0.6_pl3 | No fix listed |
| serendipity | = 0.7 | No fix listed |
| serendipity | = 0.7.1 | No fix listed |
| serendipity | = 0.8 | No fix listed |
| serendipity | = 0.8.1 | No fix listed |
| serendipity | = 0.8.2 | No fix listed |
| serendipity | = 0.8.3 | No fix listed |
| serendipity | = 0.8.4 | No fix listed |
| serendipity | = 0.8.5 | No fix listed |
| serendipity | = 0.9 | No fix listed |
| serendipity | = 0.9.1 | No fix listed |
| serendipity | = 1.0 | No fix listed |
| serendipity | = 1.0.1 | No fix listed |
| serendipity | = 1.0.2 | No fix listed |
| serendipity | = 1.0.3 | No fix listed |
| serendipity | = 1.0.4 | No fix listed |
| serendipity | = 1.1 | No fix listed |
| serendipity | = 1.1.1 | No fix listed |
| serendipity | = 1.1.2 | No fix listed |
| serendipity | = 1.1.3 | No fix listed |
| serendipity | = 1.1.4 | No fix listed |
Show 1 more
| Product | Affected versions | Fixed in |
|---|---|---|
| serendipity | = 1.2 | No fix listed |
References
- blog.s9y.org
- 29398 third-party-advisory vendor-advisory
- 29502 third-party-advisory vendor-advisory
- DSA-1528 vendor-advisory
- 28298 vdb-entry
- ADV-2008-0925 vdb-entry
- serendipity-trackbacks-data-xss(41343) vdb-entry