high7.5Public exploit code
CVE-2005-1134
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) ent…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- S9Y Serendipity 0.8beta4 - 'exit.php' SQL Injection2005-04-13 · webapps · php · Verified
Impact
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| S9y | Serendipity | Versions 0.3, 0.4, 0.5, 0.5_pl1, 0.6, 0.6_pl1 |
References
- NVD record
- CVE.org record
- http://seclists.org/lists/bugtraq/2005/Apr/0195.html
- http://secunia.com/advisories/15145
- http://securitytracker.com/id?1013699
- http://www.osvdb.org/15542
- http://www.s9y.org/5.html
- http://www.s9y.org/63.html#A9
- http://www.securityfocus.com/bid/13161
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20119
- http://seclists.org/lists/bugtraq/2005/Apr/0195.html
- http://secunia.com/advisories/15145
- http://securitytracker.com/id?1013699
- http://www.osvdb.org/15542
- http://www.s9y.org/5.html
- http://www.s9y.org/63.html#A9
- http://www.securityfocus.com/bid/13161
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20119