VULNERABILITY INTELLIGENCE
CVE-2007-4282
CVSS score5 MEDIUM
EPSS probability1.59%
CISA KEVNot currently listed
Published2007-08-09
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The "Extended properties for entries" (entryproperties) plugin in serendipity_event_entryproperties.php in Serendipity 1.1.3 allows remote authenticated users to bypass password protection and "deliver custom entryproperties settings to the Serendipity Frontend" via a certain request that modifies the password being checked.