Description

Multiple cross-site scripting (XSS) vulnerabilities in the installer in Serendipity (S9Y) 1.3 allow remote attackers to inject arbitrary web script or HTML via (1) unspecified path fields or (2) the database host field. NOTE: the timing window for exploitation of this issue might be limited.

Remediation

References

CVE-2008-1386

Related Vulnerabilities

WordPress Plugin OptionTree PHP Object Injection (2.7.2)

MySQL CVE-2016-3424 Vulnerability (CVE-2016-3424)

EspoCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-14350)

MySQL CVE-2021-2024 Vulnerability (CVE-2021-2024)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-44310)

Severity

Medium

Classification

CVE-2008-1386 CWE-707

Tags

Missing Update Known Vulnerabilities