Sploitus

31 exploited vulnerabilities in Serendipity

Vulnerabilities with publicly known exploits

Vendors
Unknown, Serendipity, Xinha, Ampache, Drupal, Mailwatch
With known exploits
31
Affected s9y Serendipity versions
= 2.4.0, 2.5.0, 1.6, 0.3, 0.4, 0.7, 0.7.1, 0.8, 0.8.1, 0.8.2, 0.8.3, 0.8.4, 0.8.5, 0.9, 0.9.1, 1.0, 1.0.1, 1.0.2, 1.0.3, 1.0.4, 1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.2, 1.2.1, 1.3, 1.3.1, 1.4, 1.4.1, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5, 1.6.1, 0.5, 0.5_pl1, 0.6, 0.6_pl1, 0.6_pl2, 0.6_pl3, 0.6_rc1, 0.6_rc2, 0.7_beta1, 0.7_beta2, 0.7_beta3, 0.7_beta4, 0.7_rc1, 0.8_beta5, 0.8_beta6, 2.6.0, 1.0_beta2, 1.0_beta3, 2.1, 2.0, 1.6.2, 2.0.2
Affected Php Xml Rpc versions
≤ 1.3.0

Vulnerabilities with exploits

Highest CVSS first — 12 of these already have exploit code on Sploitus

CVE-2026-67351
CVSS 8.8 HIGH 2026-07-30FIX AVAILABLE
CVE-2023-53933
CVSS 8.8 HIGH 2025-12-17
CVE-2023-31576
CVSS 8.8 HIGH 2023-05-16FIX AVAILABLE
CVE-2024-58282
CVSS 8.6 HIGH 2025-12-10
CVE-2012-2332 4 exploits
CVSS 7.5 HIGH 2012-08-13FIX AVAILABLE
Serendipity 1.6 Backend XSS And SQLi VulnerabilitySerendipity 1.6 Backend XSS And SQLi Vulnerability
CVE-2010-1916
CVSS 7.5 HIGH 2010-05-12FIX AVAILABLE
CVE-2005-1921 8 exploits
CVSS 7.5 HIGH 2005-07-01FIX AVAILABLE
PHPXMLRPC 1.1 - Remote Code ExecutionPHPXMLRPC < 1.1 - Remote Code Execution
CVE-2005-1134 1 exploit
CVSS 7.5 HIGH 2005-04-13FIX AVAILABLE
S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection
CVE-2004-2158 1 exploit
CVSS 7.5 HIGH 2004-12-31FIX AVAILABLE
S9Y Serendipity 0.7-beta1 - SQL Injection
CVE-2026-39971
CVSS 7.2 HIGH 2026-04-14FIX AVAILABLE
CVE-2026-39963
CVSS 6.9 MEDIUM 2026-04-14FIX AVAILABLE
CVE-2006-6242 1 exploit
CVSS 6.8 MEDIUM 2006-12-03FIX AVAILABLE
S9Y Serendipity 1.0.3 - 'comment.php' Local File Inclusion
CVE-2015-6968
CVSS 6.5 MEDIUM 2015-09-16FIX AVAILABLE
CVE-2015-6943
CVSS 6.0 MEDIUM 2015-09-15FIX AVAILABLE
CVE-2023-53932
CVSS 5.4 MEDIUM 2025-12-17
CVE-2016-10737
CVSS 5.4 MEDIUM 2019-01-16FIX AVAILABLE
CVE-2017-8102
CVSS 5.4 MEDIUM 2017-04-24FIX AVAILABLE
CVE-2016-9681
CVSS 5.4 MEDIUM 2016-12-25FIX AVAILABLE
CVE-2005-3129
CVSS 5.1 MEDIUM 2005-10-04FIX AVAILABLE
CVE-2004-1620 1 exploit
CVSS 5.0 MEDIUM 2004-10-21FIX AVAILABLE
S9Y Serendipity 0.x - 'exit.php' HTTP Response Splitting
CVE-2011-4090 1 exploit
CVSS 4.3 MEDIUM 2019-11-26FIX AVAILABLE
S9Y Serendipity 1.5.5 - 'serendipity[filter][bp.ALT]' Cross-Site Scripting
CVE-2015-6969
CVSS 4.3 MEDIUM 2015-09-16FIX AVAILABLE
CVE-2014-9432
CVSS 4.3 MEDIUM 2014-12-31FIX AVAILABLE
CVE-2013-5314 1 exploit
CVSS 4.3 MEDIUM 2013-08-19FIX AVAILABLE
S9Y Serendipity 1.6.2 - 'serendipity_admin_image_selector.php' Cross-Site Scripting
CVE-2012-2331 4 exploits
CVSS 4.3 MEDIUM 2012-08-13FIX AVAILABLE
Serendipity 1.6 Backend XSS And SQLi VulnerabilitySerendipity 1.6 Backend XSS And SQLi Vulnerability
CVE-2008-1386 1 exploit
CVSS 4.3 MEDIUM 2008-04-23FIX AVAILABLE
s9y-xss.txt
CVE-2008-1385 2 exploits
CVSS 4.3 MEDIUM 2008-04-23FIX AVAILABLE
s9y-xss.txtS9Y Serendipity 1.3 - Referer HTTP Header Cross-Site Scripting
CVE-2004-2157
CVSS 4.3 MEDIUM 2004-12-31FIX AVAILABLE
CVE-2015-8603 1 exploit
CVSS 3.5 LOW 2016-01-12FIX AVAILABLE
Serendipity 2.0.2 Cross Site Scripting
CVE-2015-2289
CVSS 3.5 LOW 2015-03-23FIX AVAILABLE
CVE-2010-2957
CVSS 2.6 LOW 2010-09-10FIX AVAILABLE