Unscored CVE-2007-1326 EUVD-2007-1323GHSA-f6vc-v2jc-9493

SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipity…

Published Mar 7, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in index.php in Serendipity 1.1.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[multiCat][] parameter.

References

serendipity-index-sql-injection(32768) vdb-entry
20070301 Serendipity unauthenticated SQL-Injection mailing-list
34935 vdb-entry
2383 third-party-advisory