CVE-2005-1451: s9y Serendipity

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The media manager in Serendipity before 0.8 allows remote attackers to upload and execute arbitrary (1) .php or (2) .shtml files.

Affected products

• s9y Serendipity: version 0.3 only; version 0.4 only; version 0.5_pl1 only; version 0.6_pl3 only; version 0.7 only; version 0.7.1 only; …

Published 2005-05-03. Last modified 2026-06-16.