Description

SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php.

Remediation

References

CVE-2012-2762

Related Vulnerabilities

Apache Traffic Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-9494)

WordPress Plugin Video Conferencing with Zoom Information Disclosure (3.8.16)

MySQL CVE-2015-4769 Vulnerability (CVE-2015-4769)

Jboss EAP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2017-2595)

WordPress Plugin Altos Connect Widget Cross-Site Scripting (1.3.0)

Severity

High

Classification

CVE-2012-2762 CWE-138

Tags

Missing Update Known Vulnerabilities