PT-2019-7548 · Serendipity · Serendipity

Published 2019-05-24 · Updated 2019-05-29 · CVE-2016-10752

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Serendipity version 2.0.3

Description The issue allows remote attackers to upload and execute arbitrary PHP code due to mishandling of an extensionless filename during a rename. This can be demonstrated by using "php" as a filename.

Recommendations For Serendipity version 2.0.3, consider disabling the serendipity moveMediaDirectory function until a patch is available to prevent the upload and execution of arbitrary PHP code.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2016-10752

Affected Products

Serendipity

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2016-10752 · Security Note
• https://osv.dev/vulnerability/CVE-2016-10752 · Vendor Advisory
• https://blog.ripstech.com/2016/serendipity-from-file-upload-to-code-execution · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10752 · Note
• https://demo.ripstech.com/projects/serendipity_2.0.3 · Note