CVE-2012-2332
Serendipity < 1.6.1 - SQL Injection via serendipity[plugin_to_conf] Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2012-2332. PoCs published by Stefan Schurtz.
AI-analyzed exploit summary This advisory describes a Cross-Site Scripting (XSS) and SQL Injection (SQLi) vulnerability in Serendipity 1.6. It provides proof-of-concept URLs for both vulnerabilities but does not include executable exploit code.
Description
SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity before 1.6.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[plugin_to_conf] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF).
Exploits (1)
This advisory describes a Cross-Site Scripting (XSS) and SQL Injection (SQLi) vulnerability in Serendipity 1.6. It provides proof-of-concept URLs for both vulnerabilities but does not include executable exploit code.