File Upload Vulnerability in Serendipity 2.0.3 from Serendipity
CVE-2016-10752

9.8CRITICAL

Key Information:

Vendor

S9y

Status
Serendipity
Vendor
CVE Published:
24 May 2019

What is CVE-2016-10752?

The serendipity_moveMediaDirectory function in Serendipity version 2.0.3 presents a security risk by mishandling extensionless filenames during rename operations. This flaw allows remote attackers to upload arbitrary PHP code, potentially leading to unauthorized execution. For instance, using a filename with the 'php' extension can exploit this vulnerability, enabling attackers to gain control over the server. Proper validation of file uploads is essential to mitigate such risks.

References

https://blog.ripstech.com/2016/serendipity-from-file-uplo...
x_refsource_MISC
https://demo.ripstech.com/projects/serendipity_2.0.3
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.