Description

SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters.

Remediation

References

CVE-2005-1134

Related Vulnerabilities

WordPress Plugin Event Calendar WD-Responsive Event Calendar Cross-Site Scripting (1.0.93)

Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2009-1890)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2023-28333)

WordPress Plugin WP Editor Arbitrary File Upload (1.2.5.3)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-0739)

Severity

High

Classification

CVE-2005-1134

Tags

Missing Update Known Vulnerabilities