Description
Multiple incomplete blacklist vulnerabilities in the serendipity_isActiveFile function in include/functions_images.inc.php in Serendipity before 2.0.2 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) .pht or (2) .phtml extension.
Remediation
References
Related Vulnerabilities
Drupal Core 8.9.0 Cross-Site Request Forgery (8.9.0)
WordPress Plugin WP e-Commerce Shop Styling Arbitrary File Download (2.5)
WordPress Plugin Slideshow Gallery 2 'border' Parameter Cross-Site Scripting (1.1.4)
MySQL CVE-2015-2566 Vulnerability (CVE-2015-2566)
Lighttpd Integer Overflow or Wraparound Vulnerability (CVE-2019-11072)