EIP-2026-111861

PRE-CVE

S9Y Serendipity 1.7.5 - 'Backend' Multiple Vulnerabilities

Title source: legacy

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-111861. PoCs published by Stefan Schurtz.

AI-analyzed exploit summary The exploit demonstrates multiple vulnerabilities in Serendipity 1.7.5, including stored XSS, SQL injection, and reflected XSS via crafted HTTP requests. It provides specific payloads and steps to trigger these vulnerabilities in the backend administration interface.

Description

S9Y Serendipity 1.7.5 - 'Backend' Multiple Vulnerabilities

Exploits (1)

exploitdb WORKING POC VERIFIED

by Stefan Schurtz · textwebappsphp

https://www.exploit-db.com/exploits/31516

View Code ZIP pw:eip

The exploit demonstrates multiple vulnerabilities in Serendipity 1.7.5, including stored XSS, SQL injection, and reflected XSS via crafted HTTP requests. It provides specific payloads and steps to trigger these vulnerabilities in the backend administration interface.

Classification

Working Poc 95%

Attack Type

Xss | Sqli

Complexity

Trivial

Reliability

Reliable

Target: Serendipity 1.7.5

Auth required

Prerequisites: Access to a 'Standard editor' account · Backend administration interface access

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1059 - Command and Scripting Interpreter

mistral-large-3 · analyzed Feb 18, 2026 Full analysis →

Details

Status pre_cve

Tracked Since Feb 18, 2026