Description

SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php.

Remediation

References

CVE-2012-2762

Related Vulnerabilities

OpenSSL Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2022-3786)

WordPress Plugin UpdraftPlus WordPress Backup Privilege Escalation (1.23.2)

WordPress Plugin SendPress Newsletters Security Bypass (1.2.10.20)

ownCloud Files or Directories Accessible to External Parties Vulnerability (CVE-2015-4715)

WordPress Plugin PowerPack for Beaver Builder Privilege Escalation (2.33.0)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2012-2762