Unknown vulnerability in Serendipity 0.8, when used with multiple authors, allows unprivileged authors to upload arbitrary media files.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1714
http://sourceforge.net/project/shownotes.php?release_id=328092