Lucene search

[email protected]CVE-2012-2762

HistoryJun 07, 2012 - 7:55 p.m.

CVE-2012-2762

2012-06-0719:55:09

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

serendipity

security vulnerability

nvd

cve-2012-2762

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

74.3%

JSON

SQL injection vulnerability in include/functions_trackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php.

Affected configurations

NVD

Node

s9yserendipityRange≤1.6.1

s9yserendipityMatch0.3

s9yserendipityMatch0.4

s9yserendipityMatch0.7

s9yserendipityMatch0.7.1

s9yserendipityMatch0.8

s9yserendipityMatch0.8.1

s9yserendipityMatch0.8.2

s9yserendipityMatch0.8.3

s9yserendipityMatch0.8.4

s9yserendipityMatch0.8.5

s9yserendipityMatch0.9

s9yserendipityMatch0.9.1

s9yserendipityMatch1.0

s9yserendipityMatch1.0.1

s9yserendipityMatch1.0.2

s9yserendipityMatch1.0.3

s9yserendipityMatch1.0.4

s9yserendipityMatch1.1

s9yserendipityMatch1.1.1

s9yserendipityMatch1.1.2

s9yserendipityMatch1.1.3

s9yserendipityMatch1.1.4

s9yserendipityMatch1.2

s9yserendipityMatch1.2.1

s9yserendipityMatch1.3

s9yserendipityMatch1.3.1

s9yserendipityMatch1.4

s9yserendipityMatch1.4.1

s9yserendipityMatch1.5.1

s9yserendipityMatch1.5.2

s9yserendipityMatch1.5.3

s9yserendipityMatch1.5.4

s9yserendipityMatch1.5.5

s9yserendipityMatch1.6

CPENameOperatorVersion
s9y:serendipitys9y serendipityle1.6.1
s9y:serendipitys9y serendipityeq0.3
s9y:serendipitys9y serendipityeq0.4
s9y:serendipitys9y serendipityeq0.7
s9y:serendipitys9y serendipityeq0.7.1
s9y:serendipitys9y serendipityeq0.8
s9y:serendipitys9y serendipityeq0.8.1
s9y:serendipitys9y serendipityeq0.8.2
s9y:serendipitys9y serendipityeq0.8.3
s9y:serendipitys9y serendipityeq0.8.4

CPE	Name	Operator	Version
s9y:serendipity	s9y serendipity	le	1.6.1
s9y:serendipity	s9y serendipity	eq	0.3
s9y:serendipity	s9y serendipity	eq	0.4
s9y:serendipity	s9y serendipity	eq	0.7
s9y:serendipity	s9y serendipity	eq	0.7.1
s9y:serendipity	s9y serendipity	eq	0.8
s9y:serendipity	s9y serendipity	eq	0.8.1
s9y:serendipity	s9y serendipity	eq	0.8.2
s9y:serendipity	s9y serendipity	eq	0.8.3
s9y:serendipity	s9y serendipity	eq	0.8.4