← Back

CVE-2004-2525

nvd nist
Published: Dec 31, 2004Modified: Apr 16, 2026

JSON object

Loading...
4.3
Vector
AV:N/AC:M/Au:N/C:N/I:P/A:N
Exploitability: 8.6 / Impact: 2.9
Source: NVD

Description

Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable.

Affected (16)

Products: S9y: Serendipity
S9y
1 product
Serendipity
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
S9y
Serendipity
Version 0.3
Serendipity
Version 0.4
Serendipity
Version 0.5
Serendipity
Version 0.5_pl1
Serendipity
Version 0.6
Serendipity
Version 0.6_pl1
Serendipity
Version 0.6_pl2
Serendipity
Version 0.6_pl3
Serendipity
Version 0.6_rc1
Serendipity
Version 0.6_rc2
Serendipity
Version 0.7
Serendipity
Version 0.7_beta1
Serendipity
Version 0.7_beta2
Serendipity
Version 0.7_beta3
Serendipity
Version 0.7_beta4
Serendipity
Version 0.7_rc1

References (12)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.