Description

Serendipity 2.0.3 is vulnerable to a SQL injection in the blog component resulting in information disclosure

Remediation

References

CVE-2017-1000129

Related Vulnerabilities

Moodle DEPRECATED: Code Vulnerability (CVE-2015-2270)

WordPress Plugin iThemes Security (formerly Better WP Security) Cross-Site Scripting (3.5.3)

WordPress Plugin Theme Blvd Sliders Multiple Security Bypass Vulnerabilities (1.2.3)

WordPress Plugin Image Gallery-Responsive Photo Gallery Cross-Site Scripting (1.4.0)

WordPress Plugin Homepage SlideShow Arbitrary File Upload (2.3)

Severity

High

Classification

CVE-2017-1000129 CWE-138 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Missing Update Known Vulnerabilities