Published: 07/06/2012 Updated: 29/08/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 668

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote malicious users to execute arbitrary SQL commands via the url parameter to comment.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
s9y serendipity 1.5.3
s9y serendipity 1.5.2
s9y serendipity 1.1.4
s9y serendipity 1.1.3
s9y serendipity 1.0.1
s9y serendipity 1.0
s9y serendipity 0.8.1
s9y serendipity 0.8
s9y serendipity 1.5.5
s9y serendipity 1.5.4
s9y serendipity 1.2.1
s9y serendipity 1.2
s9y serendipity 1.0.3
s9y serendipity 1.0.2
s9y serendipity 0.8.3
s9y serendipity 0.8.2
s9y serendipity 1.5.1
s9y serendipity 1.4.1
s9y serendipity 1.1.2
s9y serendipity 1.1.1
s9y serendipity 0.9.1
s9y serendipity 0.9
s9y serendipity 0.7.1
s9y serendipity 0.7
s9y serendipity 0.4
s9y serendipity
s9y serendipity 1.6
s9y serendipity 1.4
s9y serendipity 1.3.1
s9y serendipity 1.3
s9y serendipity 1.1
s9y serendipity 1.0.4
s9y serendipity 0.8.5
s9y serendipity 0.8.4
s9y serendipity 0.3

Serendipity version 161 suffers from a remote SQL injection vulnerability ...

CWE-89 http://secunia.com/advisories/49234 http://www.securityfocus.com/bid/53620 http://blog.s9y.org/archives/241-Serendipity-1.6.2-released.html http://www.osvdb.org/82036 http://www.securitytracker.com/id?1027079 https://www.htbridge.com/advisory/HTB23092 https://github.com/s9y/Serendipity/commit/87153991d06bc18fe4af05f97810487c4a340a92#diff-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/75760 https://nvd.nist.gov https://packetstormsecurity.com/files/113337/Serendipity-1.6.1-SQL-Injection.html

CVE-2012-2762

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect