Description

SQL injection vulnerability in serendipity/serendipity_admin.php in Serendipity before 1.6.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[plugin_to_conf] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF).

Remediation

References

CVE-2012-2332

Related Vulnerabilities

Joomla Other Vulnerability (CVE-2006-1956)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-1903)

WordPress Plugin GA Universal Cross-Site Request Forgery (1.0)

Apache HTTP Server Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') Vulnerability (CVE-2023-27522)

MySQL CVE-2021-35537 Vulnerability (CVE-2021-35537)

Severity

High

Classification

CVE-2012-2332 CWE-138

Tags

Missing Update Known Vulnerabilities