ID de Prueba:	1.3.6.1.4.1.25623.1.0.15914
Categoría:	Web application abuses
Título:	Serendipity XSS Flaw
Resumen:	The remote version of Serendipity is vulnerable to cross-site scripting;attacks due to a lack of sanity checks on the 'searchTerm' parameter in;the 'compat.php' script. With a specially crafted URL, an attacker can;cause arbitrary code execution in a user's browser resulting in a loss;of integrity.
Descripción:	Summary: The remote version of Serendipity is vulnerable to cross-site scripting attacks due to a lack of sanity checks on the 'searchTerm' parameter in the 'compat.php' script. With a specially crafted URL, an attacker can cause arbitrary code execution in a user's browser resulting in a loss of integrity. Solution: Upgrade to Serendipity 0.7.1 or newer. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2004-2525 BugTraq ID: 11790 http://www.securityfocus.com/bid/11790 http://www.osvdb.org/12177 http://securitytracker.com/id?1012383 http://secunia.com/advisories/13357 XForce ISS Database: serendipity-combatphp-xss(18322) https://exchange.xforce.ibmcloud.com/vulnerabilities/18322
Copyright	Copyright (C) 2004 David Maciejak

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.