Cross-Site Scripting (XSS) in Xinha, as included in the Serendipity package before 1.5.5, allows remote attackers to execute arbitrary code in plugins/ExtendedFileManager/manager.php and plugins/ImageManager/manager.php.
References
| Link | Resource |
|---|---|
| https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html | Release Notes Third Party Advisory Vendor Advisory |
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661 | Third Party Advisory |
| https://security-tracker.debian.org/tracker/CVE-2011-1135 | Third Party Advisory |
| https://www.openwall.com/lists/oss-security/2011/03/02/5 | Mailing List Third Party Advisory |
| https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html | Release Notes Third Party Advisory Vendor Advisory |
| https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661 | Third Party Advisory |
| https://security-tracker.debian.org/tracker/CVE-2011-1135 | Third Party Advisory |
| https://www.openwall.com/lists/oss-security/2011/03/02/5 | Mailing List Third Party Advisory |
Configurations
History
21 Nov 2024, 01:25
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://blog.s9y.org/archives/224-Important-Security-Update-Serendipity-1.5.5-released.html - Release Notes, Third Party Advisory, Vendor Advisory | |
| References | () https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=611661 - Third Party Advisory | |
| References | () https://security-tracker.debian.org/tracker/CVE-2011-1135 - Third Party Advisory | |
| References | () https://www.openwall.com/lists/oss-security/2011/03/02/5 - Mailing List, Third Party Advisory |
Information
Published : 2019-11-05 21:15
Updated : 2024-11-21 01:25
NVD link : CVE-2011-1135
Mitre link : CVE-2011-1135
CVE.ORG link : CVE-2011-1135
JSON object : View
Products Affected
s9y
- serendipity
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')