CVE-2015-6943
Serendipity < 2.0.2 - Authenticated SQL Injection via serendipity[id] Parameter
Title source: llmDescription
SQL injection vulnerability in the serendipity_checkCommentToken function in include/functions_comments.inc.php in Serendipity before 2.0.2, when "Use Tokens for Comment Moderation" is enabled, allows remote administrators to execute arbitrary SQL commands via the serendipity[id] parameter to serendipity_admin.php.
References (5)
Core 5
Core References
Exploit mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2015/Sep/10
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1033558
Exploit x_refsource_misc
http://packetstormsecurity.com/files/133428/Serendipity-2.0.1-Blind-SQL-Injection.html
Exploit x_refsource_misc
http://blog.curesec.com/article/blog/Serendipity-201-Blind-SQL-Injection-52.html
Patch x_refsource_confirm
http://blog.s9y.org/archives/265-Serendipity-2.0.2-Security-Fix-Release.html
Scores
EPSS
0.0125
EPSS Percentile
66.2%
Details
CWE
CWE-89
Status
published
Products (1)
s9y/serendipity
< 2.0.1
Published
Sep 15, 2015
Tracked Since
Feb 18, 2026