CVE Vulnerabilities

CVE-2005-1134

Published: Apr 13, 2005 | Modified: Apr 03, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) url_id or (2) entry_id parameters.

Affected Software

NameVendorStart VersionEnd Version
SerendipityS9y0.3 (including)0.3 (including)
SerendipityS9y0.4 (including)0.4 (including)
SerendipityS9y0.5 (including)0.5 (including)
SerendipityS9y0.5_pl1 (including)0.5_pl1 (including)
SerendipityS9y0.6 (including)0.6 (including)
SerendipityS9y0.6_pl1 (including)0.6_pl1 (including)
SerendipityS9y0.6_pl2 (including)0.6_pl2 (including)
SerendipityS9y0.6_pl3 (including)0.6_pl3 (including)
SerendipityS9y0.6_rc1 (including)0.6_rc1 (including)
SerendipityS9y0.6_rc2 (including)0.6_rc2 (including)
SerendipityS9y0.7 (including)0.7 (including)
SerendipityS9y0.7_beta1 (including)0.7_beta1 (including)
SerendipityS9y0.7_beta2 (including)0.7_beta2 (including)
SerendipityS9y0.7_beta3 (including)0.7_beta3 (including)
SerendipityS9y0.7_beta4 (including)0.7_beta4 (including)
SerendipityS9y0.7_rc1 (including)0.7_rc1 (including)
SerendipityS9y0.8_beta5 (including)0.8_beta5 (including)
SerendipityS9y0.8_beta6 (including)0.8_beta6 (including)

References