critical9.8
CVE-2020-10964
Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the filename of a renamed file may end with a dot.
Impact
Serendipity before 2.3.4 on Windows allows remote attackers to execute arbitrary code because the filename of a renamed file may end with a dot. This file may then be renamed to have a .php filename.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| S9y | Serendipity | before 2.3.4 |