20050413 serendipity SQL Injection vulnerabilitymailing list
http://seclists.org/lists/bugtraq/2005/Apr/0195.html CVE-2005-1134
S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection
Record summary
CVE-2005-1134 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.
Description
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBS9Y Serendipity 0.8beta4 - 'exit.php' SQL InjectionExploitDB exploitby kre0nNot analyzed1 file
References
915145Third-party advisory
http://secunia.com/advisories/15145 1013699vdb entry
http://securitytracker.com/id?1013699 15542vdb entry
http://www.osvdb.org/15542 s9y.orgConfirmation
http://www.s9y.org/5.html s9y.orgConfirmation
http://www.s9y.org/63.html 13161vdb entry
http://www.securityfocus.com/bid/13161 serendipity-urlid-entryid-sql-injection(20119)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/20119 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2005-1134