CVE:CVE-2005-1451
CNNVD:CNNVD-200505-885
Serendipity的0.8之前版本的媒体管理器使得远程攻击者可以上载和执行任意(1).php或(2).shtml文件。
solution:Upgrade s9y serendipity to a higher version than 0.3,0.4,0.5_pl1,0.6_pl3,0.7,0.7.1,0.7_beta1,0.7_beta2,0.7_beta3,0.7_beta4,0.7_rc1,0.8_beta_5,0.8_beta_6,and avoid the version 0.3,0.4,0.5_pl1,0.6_pl3,0.7,0.7.1,0.7_beta1,0.7_beta2,0.7_beta3,0.7_beta4,0.7_rc1,0.8_beta_5,0.8_beta_6