Filtered by vendor Serendipitynz Subscriptions
Filtered by product Serene Bach Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2009-2165 1 Serendipitynz 1 Serene Bach 2024-11-21 N/A
SerendipityNZ (aka SimpleBoxes) Serene Bach 2.20R and earlier, and 3.00 beta023 and earlier 3.x versions, uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id.
CVE-2007-0137 1 Serendipitynz 2 Serene Bach, Serene Bach Sb 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in SimpleBoxes/SerendipityNZ Serene Bach 2.05R and earlier, and 2.08D and earlier in the 2.08 series; and (2) sb 1.13D and earlier, and 1.18R and earlier in the 1.18 series; allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.