CVE-2006-5499

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-10-25 · updated 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Serendipity (s9y) 1.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors in the media manager administration page.

Affected products

Serendipity: through 1.0.1

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html
http://secunia.com/advisories/22501
http://securityreason.com/securityalert/1771
http://securitytracker.com/id?1017100
http://www.hardened-php.net/advisory_112006.136.html
http://www.osvdb.org/29893
http://www.s9y.org/forums/viewtopic.php?t=7356
http://www.securityfocus.com/archive/1/449189/100/0/threaded
http://www.securityfocus.com/bid/20627
http://www.vupen.com/english/advisories/2006/4135
https://exchange.xforce.ibmcloud.com/vulnerabilities/29695
http://archives.neohapsis.com/archives/fulldisclosure/2006-10/0395.html

Get alerted when CVE-2006-5499 or the next vulnerability affects your stack