CVE-2006-2495

Published: May 20, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag.

Affected (18)

Products: S9y: Serendipity

S9y

1 product

Serendipity

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
S9y Serendipity	Version 0.3
S9y Serendipity	Version 0.4
S9y Serendipity	Version 0.5
S9y Serendipity	Version 0.5_pl1
S9y Serendipity	Version 0.6
S9y Serendipity	Version 0.6_pl3
S9y Serendipity	Version 0.7.1
S9y Serendipity	Version 0.7
S9y Serendipity	Version 0.8.1
S9y Serendipity	Version 0.8.2
S9y Serendipity	Version 0.8.3
S9y Serendipity	Version 0.8.4
S9y Serendipity	Version 0.8.5
S9y Serendipity	Version 0.8
S9y Serendipity	Version 0.9.1
S9y Serendipity	Version 0.9
S9y Serendipity	Version 1.0_beta1
S9y Serendipity	Version 1.0_beta2