Description

SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters.

Remediation

References

CVE-2005-1134

Related Vulnerabilities

Microsoft SQL Server CVE-2023-21528 Vulnerability (CVE-2023-21528)

Envoy Proxy Incorrect Authorization Vulnerability (CVE-2021-32777)

WordPress Plugin Image Gallery-Responsive Photo Gallery Multiple Unspecified Vulnerabilities (1.9.58)

WordPress Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-5113)

WordPress Plugin WP Data Access Privilege Escalation (5.3.7)

Severity

High

Classification

CVE-2005-1134

Tags

Missing Update Known Vulnerabilities