# S9y Serendipity


- [CVE-2005-1449](https://insights.sbomify.com/CVE-2005-1449/): Other in n/a (critical 10.0)
- [CVE-2005-1452](https://insights.sbomify.com/CVE-2005-1452/): Missing authorization in n/a (critical 10.0)
- [CVE-2020-10964](https://insights.sbomify.com/CVE-2020-10964/): File upload in n/a (critical 9.8)
- [CVE-2011-1134](https://insights.sbomify.com/CVE-2011-1134/): Cross-site scripting in n/a (critical 9.8)
- [CVE-2016-10752](https://insights.sbomify.com/CVE-2016-10752/): File upload in n/a (critical 9.8)
- [CVE-2016-10082](https://insights.sbomify.com/CVE-2016-10082/): Code injection in n/a (critical 9.8)
- [CVE-2023-31576](https://insights.sbomify.com/CVE-2023-31576/): File upload in n/a (high 8.8)
- [CVE-2017-8101](https://insights.sbomify.com/CVE-2017-8101/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-5609](https://insights.sbomify.com/CVE-2017-5609/): SQL injection in n/a (high 8.8)
- [CVE-2017-5475](https://insights.sbomify.com/CVE-2017-5475/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2017-5476](https://insights.sbomify.com/CVE-2017-5476/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2023-53933](https://insights.sbomify.com/CVE-2023-53933/): Serendipity 2.4.0 Authenticated Remote Code Execution via File Upload (high 8.7)

---
From sbomify Insights: https://insights.sbomify.com/products/s9y/serendipity/