Description
SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php.
References
- 82036 vdb-entry
- 53620 vdb-entry
- 49234 third-party-advisory
- serendipity-trackbacksinc-sql-injection(75760) vdb-entry
- https://www.htbridge.com/advisory/HTB23092
- http://blog.s9y.org/archives/241-Serendipity-1.6.2-released.html
- 1027079 vdb-entry
- https://github.com/s9y/Serendipity/commit/87153991d06bc18fe4af05f97810487c4a340a92#diff-1