This host is running Serendipity and is prone to arbitrary file upload vulnerability.

Successful exploitation will allow attacker to upload PHP scripts and execute arbitrary commands on a web server with a specific configuration. Impact Level: Application

Upgrade to Serendipity version 1.5 or later. For updates refer to http://www.s9y.org/12.html

The flaw is due to an input validation error in the file upload functionality when processing a file with a filename containing multiple file extensions.

Serendipity version prior to 1.5 on all platforms.

• http://secunia.com/advisories/37830
• http://www.openwall.com/lists/oss-security/2009/12/21/1
• http://www.vupen.com/english/advisories/2009/3626
• http://xforce.iss.net/xforce/xfdb/54985

---

Updated on 2015-03-25