CVE-2012-2762

Severity CVSS v4.0:
Pending analysis
Type:
CWE-89 SQL Injection
Publication date:
07/06/2012
Last modified:
11/04/2025

Description

SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:s9y:serendipity:*:*:*:*:*:*:*:* 1.6.1 (including)
cpe:2.3:a:s9y:serendipity:0.3:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.4:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.7:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.7.1:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.8:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.8.1:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.8.2:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.8.3:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.8.4:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.8.5:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.9:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:0.9.1:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:1.0:*:*:*:*:*:*:*
cpe:2.3:a:s9y:serendipity:1.0.1:*:*:*:*:*:*:*