CVE-2005-1134: SQL Injection
Published Apr 13, 2005
·Updated
SQL injection vulnerability in exit.php for Serendipity 0.8 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) urlid or (2) entryid parameters.
Affected Software
18 affected components
S9Y serendipity=0.5
S9Y serendipity=0.8_beta5
S9Y serendipity=0.4
S9Y serendipity=0.7
S9Y serendipity=0.7_beta1
S9Y serendipity=0.6_rc1
S9Y serendipity=0.5_pl1
S9Y serendipity=0.6_pl2
S9Y serendipity=0.7_beta3
S9Y serendipity=0.8_beta6
S9Y serendipity=0.7_beta4
S9Y serendipity=0.6_pl1
S9Y serendipity=0.3
S9Y serendipity=0.6_pl3
S9Y serendipity=0.6_rc2
S9Y serendipity=0.7_beta2
S9Y serendipity=0.7_rc1
S9Y serendipity=0.6
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Apr 13, 2005
CVE Published
04:00 AM
Apr 16, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1134?
CVE-2005-1134 is classified as a critical vulnerability due to its ability to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2005-1134?
To fix CVE-2005-1134, upgrade to Serendipity version 0.9 or later, which addresses this SQL injection vulnerability.
3
What versions of Serendipity are affected by CVE-2005-1134?
CVE-2005-1134 affects Serendipity versions 0.8 and earlier.
4
What type of vulnerability is CVE-2005-1134?
CVE-2005-1134 is an SQL injection vulnerability that allows attackers to manipulate database queries.
5
Can CVE-2005-1134 be exploited remotely?
Yes, remote attackers can exploit CVE-2005-1134 by sending specially crafted requests to the affected website.