CVE:CVE-2006-6242
CNNVD:CNNVD-200612-018
Serendipity存在多个目录遍访漏洞，远程攻击者可通过在(1)include/lang.inc.php内；或传给plugins/ scripts(2)serendipity_event_bbcode/serendipity_event_bbcode.php，(3)serendipity_event_browsercompatibility/serendipity_event_browsercompatibility.php，(4)serendipity_event_contentrewrite/serendipity_event_contentrewrite.php，(5)serendipity_event_creativecommons/serendipity_event_creativecommons.php，(6)serendipity_event_emoticate/serendipity_event_emoticate.php，(7)serendipity_event_entryproperties/serendipity_event_entryproperties.php，(8)serendipity_event_karma/serendipity_event_karma.php，(9)serendipity_event_livesearch/serendipity_event_livesearch.php，(10)serendipity_event_mailer/serendipity_event_mailer.php，(11)serendipity_event_nl2br/serendipity_event_nl2br.php，(12)serendipity_event_s9ymarkup/serendipity_event_s9ymarkup.php，(13)serendipity_event_searchhighlight/serendipity_event_searchhighlight.php，(14)serendipity_event_spamblock/serendipity_event_spamblock.php，(15)serendipity_event_spartacus/serendipity_event_spartacus.php，(16)serendipity_event_statistics/serendipity_plugin_statistics.php，(17)serendipity_event_templatechooser/serendipity_event_templatechooser.php，(18)serendipity_event_textile/serendipity_event_textile.php，(19)serendipity_event_textwiki/serendipity_event_textwiki.php，(20)serendipity_event_trackexits/serendipity_event_trackexits.php，(21)serendipity_event_weblogping/serendipity_event_weblogping.php，(22)serendipity_event_xhtmlcleanup/serendipity_event_xhtmlcleanup.php，(23)serendipity_plugin_comments/serendipity_plugin_comments.php，(24)serendipity_plugin_creativecommons/serendipity_plugin_creativecommons.php，(25)serendipity_plugin_entrylinks/serendipity_plugin_entrylinks.php，(26)serendipity_plugin_eventwrapper/serendipity_plugin_eventwrapper.php，(27)serendipity_plugin_history/serendipity_plugin_history.php，(28)serendipity_plugin_recententries/serendipity_plugin_recententries.php，(29)serendipity_plugin_remoterss/serendipity_plugin_remoterss.php，(30)serendipity_plugin_shoutbox/serendipity_plugin_shoutbox.php，(31)和(32)serendipity_plugin_templatedropdown/serendipity_plugin_templatedropdown.php内的serendipity[charset]参数（该参数中包含..）序列来读取或包含任意本地文件。
solution:Upgrade s9y serendipity to a higher version than 0.3,0.4,0.5,0.5_pl1,0.6,0.6_pl1,0.6_pl2,0.6_pl3,0.6_rc1,0.6_rc2,0.7,0.7.1,0.7_beta1,0.7_beta2,0.7_beta3,0.7_beta4,0.7_rc1,0.8,0.8.1,0.8.2,0.8_beta5,0.8_beta6,0.9.1,1.0.3,1.0_beta2,1.0_beta3,and avoid the version 0.3,0.4,0.5,0.5_pl1,0.6,0.6_pl1,0.6_pl2,0.6_pl3,0.6_rc1,0.6_rc2,0.7,0.7.1,0.7_beta1,0.7_beta2,0.7_beta3,0.7_beta4,0.7_rc1,0.8,0.8.1,0.8.2,0.8_beta5,0.8_beta6,0.9.1,1.0.3,1.0_beta2,1.0_beta3