CVE-2008-1385: XSS
Published Apr 23, 2008
·Updated
Cross-site scripting (XSS) vulnerability in the Top Referrers (aka referrer) plugin in Serendipity (S9Y) before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the Referer HTTP header.
Affected Software
27 affected components
S9Y serendipity=1.0.3
S9Y serendipity=1.1.4
S9Y serendipity=0.4
S9Y serendipity=0.8.5
S9Y serendipity=0.7
S9Y serendipity=1.1.2
S9Y serendipity=1.0.4
S9Y serendipity=0.8.3
S9Y serendipity=0.8.4
S9Y serendipity=0.8.2
S9Y serendipity=1.0.2
S9Y serendipity=1.1.1
S9Y serendipity=1.1
S9Y serendipity=0.7.1
S9Y serendipity=0.5_pl1
S9Y serendipity=1.0.1
S9Y serendipity=1.0
S9Y serendipity=0.8.1
S9Y serendipity=0.8
S9Y serendipity<=1.3
S9Y serendipity=1.2.1
S9Y serendipity=0.3
S9Y serendipity=0.6_pl3
S9Y serendipity=0.9.1
S9Y serendipity=0.9
S9Y serendipity=1.1.3
S9Y serendipity=1.2
Remediation
Patch Available
Event History
Apr 23, 2008
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1385?
CVE-2008-1385 has a medium severity due to its potential for cross-site scripting attacks.
2
How do I fix CVE-2008-1385?
To fix CVE-2008-1385, upgrade your Serendipity installation to version 1.3.1 or later.
3
Which versions of Serendipity are affected by CVE-2008-1385?
CVE-2008-1385 affects Serendipity versions prior to 1.3.1.
4
What kind of attack is possible with CVE-2008-1385?
CVE-2008-1385 enables remote attackers to conduct cross-site scripting (XSS) attacks.
5
Who is at risk from CVE-2008-1385?
Users of Serendipity versions prior to 1.3.1 are at risk from CVE-2008-1385.