Serendipity

DATE	CVE	VULNERABILITY TITLE	RISK
2004-12-31	CVE-2004-2525	Remote Cross-Site Scripting vulnerability in S9Y Serendipity Cross-site scripting (XSS) vulnerability in compat.php in Serendipity before 0.7.1 allows remote attackers to inject arbitrary web script or HTML via the searchTerm variable. network s9y	4.3
2004-12-31	CVE-2004-2158	Input Validation vulnerability in S9Y Serendipity 0.7Beta1 SQL injection vulnerability in Serendipity 0.7-beta1 allows remote attackers to execute arbitrary SQL commands via the entry_id parameter to (1) exit.php or (2) comment.php. network low complexity s9y	7.5
2004-12-31	CVE-2004-2157	Input Validation vulnerability in S9Y Serendipity 0.7Beta1 Cross-site scripting (XSS) vulnerability in Comment.php in Serendipity 0.7 beta1, and possibly other versions before 0.7-beta3, allows remote attackers to inject arbitrary HTML and PHP code via the (1) email or (2) username field. network s9y	4.3
2004-10-21	CVE-2004-1620	Unspecified vulnerability in S9Y Serendipity CRLF injection vulnerability in Serendipity before 0.7rc1 allows remote attackers to perform HTTP Response Splitting attacks to modify expected HTML content from the server via the url parameter in (1) index.php and (2) exit.php, or (3) the HTTP Referer field in comment.php. network low complexity s9y	5.0