Vulnerabilities > S9Y > Serendipity > 0.8.1

DATE CVE VULNERABILITY TITLE RISK
2006-05-20 CVE-2006-2495 Cross-Site Request Forgery vulnerability in Serendipity
Cross-site request forgery (CSRF) vulnerability in the Entry Manager in Serendipity before 1.0-beta3 allows remote attackers to perform unauthorized actions as a logged-in user via a link or IMG tag.
network
low complexity
s9y
7.5
2005-10-04 CVE-2005-3129 Cross-Site Request Forgery vulnerability in Serendipity
Cross-site request forgery (CSRF) vulnerability in Serendipity 0.8.4 and earlier allows remote attackers to perform unauthorized actions as a logged in user via a link or IMG tag to serendipity_admin.php.
network
high complexity
s9y
5.1