s9y Serendipity, Xinha

ソフト名：s9y Serendipity 1.5.2, Xinha 0.95
回避策：アップデートにて対応
脆弱性：リモートファイルアップロード
ソース：http://php-security.org/2010/05/10/mops-2010-019-serendipity-wysiwyg-editor-plugin-configuration-injection-vulnerability/index.html
http://php-security.org/2010/05/10/mops-2010-020-xinha-wysiwyg-plugin-configuration-injection-vulnerability/index.html
http://www.s9y.org/
http://trac.xinha.org/
http://www.securityfocus.com/bid/40033
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1916
http://secunia.com/advisories/39782
http://secunia.com/advisories/39783
http://secunia.com/advisories/39808
CVE：CVE-2010-1916
危険性：Medium Risk