CVE-2012-2762: SQL Injection
Published Jun 7, 2012
·Updated
SQL injection vulnerability in include/functionstrackbacks.inc.php in Serendipity 1.6.2 allows remote attackers to execute arbitrary SQL commands via the url parameter to comment.php.
Affected Software
35 affected components
S9Y serendipity<=1.6.1
S9Y serendipity=0.3
S9Y serendipity=0.4
S9Y serendipity=0.7
S9Y serendipity=0.7.1
S9Y serendipity=0.8
S9Y serendipity=0.8.1
S9Y serendipity=0.8.2
S9Y serendipity=0.8.3
S9Y serendipity=0.8.4
S9Y serendipity=0.8.5
S9Y serendipity=0.9
S9Y serendipity=0.9.1
S9Y serendipity=1.0
S9Y serendipity=1.0.1
S9Y serendipity=1.0.2
S9Y serendipity=1.0.3
S9Y serendipity=1.0.4
S9Y serendipity=1.1
S9Y serendipity=1.1.1
S9Y serendipity=1.1.2
S9Y serendipity=1.1.3
S9Y serendipity=1.1.4
S9Y serendipity=1.2
S9Y serendipity=1.2.1
S9Y serendipity=1.3
S9Y serendipity=1.3.1
S9Y serendipity=1.4
S9Y serendipity=1.4.1
S9Y serendipity=1.5.1
S9Y serendipity=1.5.2
S9Y serendipity=1.5.3
S9Y serendipity=1.5.4
S9Y serendipity=1.5.5
S9Y serendipity=1.6
Event History
Jun 7, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2762?
The severity of CVE-2012-2762 is considered high due to its ability to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2012-2762?
To fix CVE-2012-2762, it is recommended to upgrade to Serendipity version 1.6.2 or later.
3
Which versions of Serendipity are affected by CVE-2012-2762?
CVE-2012-2762 affects Serendipity versions from 0.3 to 1.6.1.
4
What kind of attack can be executed using CVE-2012-2762?
CVE-2012-2762 allows remote attackers to perform SQL injection attacks through the url parameter of comment.php.
5
Is CVE-2012-2762 a widespread vulnerability?
CVE-2012-2762 is specific to the Serendipity CMS, making it a targeted vulnerability rather than widely pervasive.