Files
CVEs-PoC/2007/CVE-2007-4282.md
2025-09-29 21:09:30 +02:00

812 B

CVE-2007-4282

Description

The "Extended properties for entries" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies the password being checked.

POC

Reference

Github

No PoCs found on GitHub currently.