CVE-2012-2332: SQL Injection

Q: What is the severity of CVE-2012-2332?

The severity of CVE-2012-2332 is considered medium as it allows remote attackers to execute arbitrary SQL commands.

Q: How do I fix CVE-2012-2332?

To fix CVE-2012-2332, update Serendipity to version 1.6.1 or later, which addresses this vulnerability.

Q: What versions of Serendipity are affected by CVE-2012-2332?

CVE-2012-2332 affects all versions of Serendipity prior to 1.6.1.

Q: Can CVE-2012-2332 lead to data exposure?

Yes, CVE-2012-2332 can lead to unauthorized access and manipulation of the database, resulting in potential data exposure.

Q: Is CVE-2012-2332 related to CSRF attacks?

Yes, CVE-2012-2332 may be the result of cross-site request forgery (CSRF) issues that allow malicious SQL injection.

Published Aug 13, 2012

Updated

SQL injection vulnerability in serendipity/serendipityadmin.php in Serendipity before 1.6.1 allows remote attackers to execute arbitrary SQL commands via the serendipity[plugintoconf] parameter. NOTE: this issue might be resultant from cross-site request forgery (CSRF).

Affected Software

35 affected components

S9Y serendipity<=1.6

S9Y serendipity=0.3

S9Y serendipity=0.4

S9Y serendipity=0.7

S9Y serendipity=0.7.1

S9Y serendipity=0.8

S9Y serendipity=0.8.1

S9Y serendipity=0.8.2

S9Y serendipity=0.8.3

S9Y serendipity=0.8.4

S9Y serendipity=0.8.5

S9Y serendipity=0.9

S9Y serendipity=0.9.1

S9Y serendipity=1.0

S9Y serendipity=1.0.1

S9Y serendipity=1.0.2

S9Y serendipity=1.0.3

S9Y serendipity=1.0.4

S9Y serendipity=1.1

S9Y serendipity=1.1.1

S9Y serendipity=1.1.2

S9Y serendipity=1.1.3

S9Y serendipity=1.1.4

S9Y serendipity=1.2

S9Y serendipity=1.2.1

S9Y serendipity=1.3

S9Y serendipity=1.3.1

S9Y serendipity=1.4

S9Y serendipity=1.4.1

S9Y serendipity=1.5.1

S9Y serendipity=1.5.2

S9Y serendipity=1.5.3

S9Y serendipity=1.5.4

S9Y serendipity=1.5.5

S9Y serendipity=1.6.1

Event History

Aug 13, 2012

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-2332?

The severity of CVE-2012-2332 is considered medium as it allows remote attackers to execute arbitrary SQL commands.

How do I fix CVE-2012-2332?

To fix CVE-2012-2332, update Serendipity to version 1.6.1 or later, which addresses this vulnerability.

What versions of Serendipity are affected by CVE-2012-2332?

CVE-2012-2332 affects all versions of Serendipity prior to 1.6.1.

Can CVE-2012-2332 lead to data exposure?

Yes, CVE-2012-2332 can lead to unauthorized access and manipulation of the database, resulting in potential data exposure.

Is CVE-2012-2332 related to CSRF attacks?