CVE-2020-10964

CVE-2020-10964 is a critical arbitrary code execution vulnerability affecting Serendipity versions prior to 2.3.4 on Windows. It allows remote attackers to rename files with a trailing dot to a .php extension, leading to malicious code execution. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.