CVE-2006-5499

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.85%

Published

Oct 25, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.

Affected Products (1)

serendipity · serendipityvulnerable

References (20)

http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html

http://secunia.com/advisories/22501

PatchVendor Advisory

http://securityreason.com/securityalert/1771

http://securitytracker.com/id?1017100

http://www.hardened-php.net/advisory_112006.136.html

http://www.osvdb.org/29893

http://www.s9y.org/forums/viewtopic.php?t=7356

http://www.securityfocus.com/archive/1/449189/100/0/threaded

http://www.securityfocus.com/bid/20627

http://www.vupen.com/english/advisories/2006/4135

https://exchange.xforce.ibmcloud.com/vulnerabilities/29695